Ensure local login warning banner is configured properly

LowLevel 1Automatedfreebsd

Description

The contents of the /etc/issue file are displayed to users prior to login for local terminals. Unix-based systems typically display information about the OS release and patch level upon logging in. This information can be useful to developers who are developing software for a particular OS platform. FreeBSD does not use the issue file by default. Audit: /etc/issue must not disclose the OS version from /etc/os-release; review the wording against site policy.

How it is checked

Audit method: Shell command

shell

[ -f /etc/issue ] || { echo compliant; exit 0; }; v=$(grep "^VERSION=" /etc/os-release 2>/dev/null | cut -d= -f2 | sed -e 's/"//g'); [ -n "$v" ] || exit 1; grep -Fiq "$v" /etc/issue && echo "/etc/issue discloses the OS version" || echo compliant

Expected output: compliant

How it is fixed

Fix method: Guidance or infrastructure patch

Edit the /etc/issue file with the appropriate contents according to your site policy, remove any references to the OS platform Example: # echo "Authorized users only. All activity may be monitored and reported." > /etc/issue

Properties

Operating systems: Any
Tags: freebsdaccounts
Reference: CIS FreeBSD 14 Benchmark v1.0.1 - 1.6.2 Ensure local login warning banner is configured properly

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target freebsd