Bug 868 - /etc/issue.net special characters should be supported
Summary: /etc/issue.net special characters should be supported
Status: CLOSED WONTFIX
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: sshd (show other bugs)
Version: 3.8p1
Hardware: All Linux
: P2 enhancement
Assignee: OpenSSH Bugzilla mailing list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-05-17 23:17 AEST by Florian Effenberger
Modified: 2004-09-11 13:18 AEST (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Effenberger 2004-05-17 23:17:01 AEST
The /etc/issue.net special characters should be supported, e.g. "Kernel \r on an
\m" should print the correct values for a SSH banner.
Comment 1 Damien Miller 2004-05-17 23:35:37 AEST
I don't think so - these are a Linuxism with would require addition of a bit of
complexity. Besides, I don't think it is a good idea to advertise one's kernel
version and machine architecture to a potential attacker.
Comment 2 Florian Effenberger 2004-05-17 23:45:42 AEST
It would be very practical to show some important information to SSH users.
/etc/issue.net can contain some other stuff than kernel information as well :)

At least please provide an OpenSSH-unique format for displaying this
information, e.g. with $kernelver, $architecture, etc. in the OpenSSH banner file.

Regarding the disclosure of information to remote users: Please also have a look
at bug 764
Comment 3 Damien Miller 2004-05-18 00:14:55 AEST
If you read bug #764, you will see that it is information disclosure that is
required for compatibility. We would probably like to get rid of it one day, but
not until the protocol is published as an RFC and not before we are willing to
give up compatibility with pre-RFC versions.

Back to this bug: I don't see any benefit in adding complexity to sshd to allow
users to disclose more information. If you really want to make this information
public, why not autogenerate issue.net at boot time? (OpenBSD does just this
with /etc/motd)
Comment 4 Jason McCormick 2004-05-18 02:44:05 AEST
  Also, keep in mind that Linux itself has three different "standard" getty
applications - mingetty, mgetty and agetty.  All three take different escape
sequences for /etc/issue*.  And all of the escape sequences contain info that's
pretty easily gleaned from perl or another scripting language of choice to
generate at boot or at intervals.
Comment 5 Florian Effenberger 2004-05-18 02:54:04 AEST
Ok, acknowledged ;)