<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Because we would like to have 2
different issue files (different content): tty and ssh. <br>
But guess I have to make a patch then for internal use :-)<br>
<br>
- Gerwin<br>
<br>
On 01/21/2015 04:02 PM, Gabe Alford wrote:<br>
</div>
<blockquote
cite="mid:CAGLxfGwisE5=Fe3LzuKO7kY=odfU0n4wn7_6bhoEj6as4cvg2g@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Just read this thread.<br>
<br>
</div>
I may be missing something here, but why are you using <a
moz-do-not-send="true" href="http://issue.net">issue.net</a>
for SSH banners?<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Wed, Jan 21, 2015 at 7:36 AM,
Jeremiah Jahn <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:jeremiah@goodinassociates.com"
target="_blank">jeremiah@goodinassociates.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Nope, I
don't think I ever did. I'm assuming the principles are so<br>
overwhelmed, given the current amount of activity, that the
thing to<br>
do would be submit your own patch that splits these things
up into two<br>
pieces. I got sucked into a different project right now,
otherwise,<br>
that's what I'd probably do. Now that everything is on
github, it's a<br>
lot easier.<br>
<div class="HOEnZb">
<div class="h5"><br>
On Wed, Jan 21, 2015 at 2:09 AM, Gerwin Krist | LinQhost
Internet<br>
Services <<a moz-do-not-send="true"
href="mailto:gerwin@linqhost.nl">gerwin@linqhost.nl</a>>
wrote:<br>
> Hi,<br>
><br>
> Did you get any response on this one? Only allowing
/etc/issue is not<br>
> workable when using<br>
> both console and ssh logins. The console login is
accepting escape cookies<br>
> the ssh version<br>
> not.<br>
><br>
><br>
> On 08/01/2014 10:38 PM, Jeremiah Jahn wrote:<br>
>><br>
>> We used to have to keep out banners under
/etc/issue for the console,<br>
>> and /etc/<a moz-do-not-send="true"
href="http://issue.net" target="_blank">issue.net</a>
for remote access.<br>
>> Would it be okay to make this rule deal with
either one?<br>
>><br>
>> diff --git
a/shared/oval/sshd_enable_warning_banner.xml<br>
>> b/shared/oval/sshd_enable_warning_banner.xml<br>
>> index 0bd8d32..ace8b75 100644<br>
>> ---
a/shared/oval/sshd_enable_warning_banner.xml<br>
>> +++
b/shared/oval/sshd_enable_warning_banner.xml<br>
>> @@ -25,7 +25,7 @@<br>
>> </ind:textfilecontent54_test><br>
>> <ind:textfilecontent54_object
id="obj_sshd_banner_set" version="2"><br>
>>
<ind:filepath>/etc/ssh/sshd_config</ind:filepath><br>
>> - <ind:pattern operation="pattern<br>
>><br>
>>
match">^[\s]*(?i)Banner(?-i)[\s]+/etc/issue[\s]*(?:|(?:#.*))?$</ind:pattern><br>
>> + <ind:pattern operation="pattern<br>
>><br>
>>
match">^[\s]*(?i)Banner(?-i)[\s]+/etc/issue(.net){0,1}[\s]*(?:|(?:#.*))?$</ind:pattern><br>
>> <ind:instance
datatype="int">1</ind:instance><br>
>> </ind:textfilecontent54_object><br>
>> </def-group><br>
><br>
><br>
--<br>
SCAP Security Guide mailing list<br>
<a moz-do-not-send="true"
href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide"
target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
<a moz-do-not-send="true"
href="https://github.com/OpenSCAP/scap-security-guide/"
target="_blank">https://github.com/OpenSCAP/scap-security-guide/</a></div>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
</body>
</html>