Configurable SSH Banner File

dev-sec · Nov 7, 2016 · 325fb9c · 325fb9c
1 parent 2d11a0f
commit 325fb9c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/attributes/default.rb b/attributes/default.rb
@@ -72,6 +72,7 @@
 default['ssh']['print_motd']              = false   # sshd
 default['ssh']['print_last_log']          = false   # sshd
 default['ssh']['banner']                  = false   # sshd
+default['ssh']['banner_path']             = '/etc/ssh/banner.txt'   # sshd
 default['ssh']['os_banner']               = false   # sshd (Debian OS family)
 
 # set this to nil to let us use the default OpenSSH in case it's not set by the user

diff --git a/templates/default/opensshd.conf.erb b/templates/default/opensshd.conf.erb
@@ -177,7 +177,7 @@ X11UseLocalhost yes
 
 PrintMotd <%= ((@node['ssh']['print_motd']) ? 'yes' : 'no' ) %>
 PrintLastLog <%= ((@node['ssh']['print_last_log']) ? 'yes' : 'no' ) %>
-Banner <%= @node['ssh']['banner'] ? '/etc/ssh/banner.txt' : 'none' %>
+Banner <%= @node['ssh']['banner'] ? @node['ssh']['banner_path'] : 'none' %>
 
 <% if @node['platform_family'] == 'debian' %>
 DebianBanner <%= @node['ssh']['os_banner'] ? 'yes' : 'no' %>