Ensure message of the day is configured properly

How it is checked

Audit method: Shell command

[ -f /etc/motd ] || { echo compliant; exit 0; }; v=$(grep "^VERSION=" /etc/os-release 2>/dev/null | cut -d= -f2 | sed -e 's/"//g'); [ -n "$v" ] || exit 1; grep -Fiq "$v" /etc/motd && echo "/etc/motd discloses the OS version" || echo compliant

Expected output

compliant

How it is fixed

Fix method: Guidance or infrastructure patch

Edit the /etc/motd file with the appropriate contents according to your site policy, remove any references to the OS platform. -OR- -IF- the motd is not used, this file can be removed. Run the following command to disable the motd service: # rm -f /etc/motd # service motd stop # service motd disable # cat /etc/mot Add the default template without any version-specific information: # cp /etc/motd.template /etc/motd -OR- Edit the file /etc/motd with content that is appropriate to your site policy.

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

tmaegis scan --target freebsd