Oracle® Solaris 11 Security Guidelines

Exit Print View

Updated: August 2014
 
 

How to Place a Security Message in Banner Files

Use this procedure to create security messages in two banner files that reflect your site's security policy. The /etc/issue file displays before authentication, while the /etc/motd file displays after authentication.


Note - The sample messages in this procedure do not satisfy U.S. government requirements and likely do not satisfy your security policy. Consult with your company's legal counsel about the content of the security message.

Before You Begin

You must become an administrator who is assigned the Administrator Message Edit rights profile. For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.2 .

  1. Create the /etc/issue file and add a security message.
    # pfedit /etc/issue
    ALERT   ALERT   ALERT   ALERT   ALERT
    
    This machine is available to authorized users only.
    
    If you are an authorized user, continue.
    
    Your actions are monitored, and can be recorded.

    The login command displays the contents of /etc/issue before authentication, as do the ssh, telnet, and FTP services. To display the contents of /etc/issue at desktop login, see How to Place a Security Message on the Desktop Login Screen.

    For more information, see the issue(4) and pfedit(1M) man pages.

  2. Add a security message to the /etc/motd file.
    # pfedit /etc/motd
    This system serves authorized users only. Activity is monitored and reported.

    In Oracle Solaris, the user's initial shell displays the contents of the /etc/motd file.