{"description": "To configure the system message of the day banner edit the <tt>/etc/motd</tt> file.\nReplace the default text with a message compliant with the local site policy.\nThe message should not contain information about operating system version,\nrelease, kernel version or patch level.\n\nThe recommended banner text can be tailored in the XCCDF Value <tt>xccdf_org.ssgproject.content_value_cis_banner_text</tt>:\n<pre>\n<sub idref=\"cis_banner_text\" />\n</pre>", "rationale": "Warning messages inform users who are attempting to login to the system of their legal\nstatus regarding the system and must include the name of the organization that owns\nthe system and any monitoring policies that are in place. Displaying OS and patch level\ninformation in login banners also has the side effect of providing detailed system\ninformation to attackers attempting to target specific exploits of a system. Authorized\nusers can easily get this information by running the <tt>uname -a</tt> command once they\nhave logged in.", "severity": "medium", "references": {"cis": ["1.6.1"]}, "control_references": {"cis": ["1.6.1"]}, "components": [], "identifiers": {}, "ocil_clause": "any results are returned", "ocil": "Run the following command and verify no results are returned:\n\n$ grep -E -i \"(\\\\\\v|\\\\\\r|\\\\\\m|\\\\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/\"//g'))\" /etc/motd", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": "system_with_kernel", "platforms": ["system_with_kernel"], "sce_metadata": {}, "inherited_platforms": [], "cpe_platform_names": ["system_with_kernel"], "inherited_cpe_platform_names": [], "bash_conditional": null, "fixes": {}, "title": "Ensure Message Of The Day Is Configured Properly", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd_cis/rule.yml", "template": {"name": "cis_banner", "vars": {"filepath": "/etc/motd", "banner_must_be_set": "false"}, "backends": {}}}