Page MenuHomeVyOS Platform

Is the 'Welcome to VyOS' message when using SSH an information leak?
Open, Requires assessmentPublicBUG

Description

Is the 'Welcome to VyOS' message when using SSH an information leak?
It could allow people to scan the internet looking for VyOS instances.

Would it be better to display 'Welcome to VyOS' after logging in instead?
There is a file at /etc/motd.tail but it doesn't seem to be being displayed.

https://wiki.debian.org/motd

Details

Difficulty level
Easy (less than an hour)
Version
1.3-rolling-201912310217
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)

Event Timeline

Note that it is now possible to set the pre-login banner to an empty string: T2099

set system login banner pre-login ""

Although I do still wonder having a pre-login banner is a good idea.

Ok, let's switch to an empty banner.

A banner would be a good thing. At least you would be able to have some sort of legal message on your device. I would recommend no banner by default so users can add one.