Page MenuHomeVyOS Platform

Is the 'Welcome to VyOS' message when using SSH an information leak?
Closed, ResolvedPublicBUG

Description

Is the 'Welcome to VyOS' message when using SSH an information leak?
It could allow people to scan the internet looking for VyOS instances.

Would it be better to display 'Welcome to VyOS' after logging in instead?
There is a file at /etc/motd.tail but it doesn't seem to be being displayed.

https://wiki.debian.org/motd

Details

Difficulty level
Easy (less than an hour)
Version
1.3-rolling-201912310217
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Behavior change
Issue type
Improvement (missing useful functionality)

Event Timeline

Note that it is now possible to set the pre-login banner to an empty string: T2099

set system login banner pre-login ""

Although I do still wonder having a pre-login banner is a good idea.

Ok, let's switch to an empty banner.

A banner would be a good thing. At least you would be able to have some sort of legal message on your device. I would recommend no banner by default so users can add one.

dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Behavior change.
erkin set Issue type to Improvement (missing useful functionality).Aug 31 2021, 5:58 PM

As said in previous comments, login banner is available, both on 1.3 and 1.4
I think this task can be marked as resolved

n.fort claimed this task.