On 03/12/2017 05:06 AM, Thorsten Kukuk wrote:
Hi,
On Sun, Mar 12, Bruno Friedmann wrote:
But I didn't find from where come the ip, if I modify my /etc/issue and issue.net according to my needs, issue is overwriten after reboot. That's issue-generator, see "man issue-generator" and "man issue.d"
And it is exactly from advantage for your case: that you want to provide additional informations in the issue file. With the old way, if you edited /etc/issue, you always get a conflict on the next update and upstream changes were ignored. Now you can easy add additional informations.
I agree that the IP numbers and ssh keys are not from that interest on desktop machines or notebooks, but on this machines, you normally don't see them anyways, since they are hidden by the graphical login manager. But in other cases, they are very helpfull. But in the end, that's easy changeable and now you can put your own informations in that file, and you will get the changes from the release packages, too.
Ah, I presume that issue-generator can be uninstalled then? My environment requires a large multi-line warning banner to be displayed before actual login, with the user required to "click to accept" the conditions "before" login is completed. I've satisfied the requirement for remote ssh and local console logins with /etc/issue. Entering username/password satisfies the click-to-accept requirement. I've solved the problem with graphical logins by using kdm and zenity. I haven't been able to determine if sddm would work. Also, display of IP addresses before login would be totally forbidden by IA policy here. We even have to configure the graphical logins to NOT display anything about usernames and current logins. Arguments about how useless this kind of information would be to an adversary is moot. IA policy trumps all. That being said, is there a better way to display a click-through warning banner before actual login? Console logins, remote ssh logins, and graphical logins? Regards, Lew -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org