Page MenuHomeVyOS Platform

Is the 'Welcome to VyOS' message when using SSH an information leak?
Open, Requires assessmentPublicBUG

Description

Is the 'Welcome to VyOS' message when using SSH an information leak?
It could allow people to scan the internet looking for VyOS instances.

Would it be better to display 'Welcome to VyOS' after logging in instead?
There is a file at /etc/motd.tail but it doesn't seem to be being displayed.

https://wiki.debian.org/motd

Details

Difficulty level
Easy (less than an hour)
Version
1.3-rolling-201912310217
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)

Event Timeline

njh created this task.Jan 1 2020, 4:07 PM
pasik added a subscriber: pasik.Jan 1 2020, 4:26 PM
njh added a comment.EditedSun, May 24, 10:10 AM

Note that it is now possible to set the pre-login banner to an empty string: T2099

set system login banner pre-login ""

Although I do still wonder having a pre-login banner is a good idea.