Details

The recommendation is to edit the /etc/ssh/sshd_config file and configure a path to a login herald message.

The login herald configured previously is not displayed during the initiation of a new SSH connection. Prior to a password being entered the user should accept the terms and conditions of the corporate acceptable usage policy.

Solution

Create an SSH banner file-

printf ‘Unauthorized use of this system is prohibited.
‘ > /etc/ssh/ssh_banner

NOTE- The content of the banner file can reflect any internal acceptable usage policy standards

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/528

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-8a.

Source

• Tenable.com/audits