From 584f1c23c88d881f5a42de5440e8af74163dd36d Mon Sep 17 00:00:00 2001 From: Brendan Shephard Date: Thu, 5 Dec 2024 10:33:32 +1000 Subject: [PATCH] Explicitly set PrintMotd to no This change explicitly sets PrintMotd to no in the sshd_config. PrintMotd defaults to yes, and we're now using PAM to manage our motd requirements in RHEL9: https://www.man7.org/linux/man-pages/man8/pam_motd.8.html https://www.man7.org/linux/man-pages/man5/sshd_config.5.html Signed-off-by: Brendan Shephard --- roles/edpm_sshd/defaults/main.yml | 1 + roles/edpm_sshd/meta/argument_specs.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/roles/edpm_sshd/defaults/main.yml b/roles/edpm_sshd/defaults/main.yml index 32b7d6266..32834528d 100644 --- a/roles/edpm_sshd/defaults/main.yml +++ b/roles/edpm_sshd/defaults/main.yml @@ -56,6 +56,7 @@ edpm_sshd_server_options: - 'LC_IDENTIFICATION LC_ALL LANGUAGE' - 'XMODIFIERS' Subsystem: 'sftp /usr/libexec/openssh/sftp-server' + PrintMotd: 'no' # Firewall configuration part edpm_sshd_configure_firewall: true diff --git a/roles/edpm_sshd/meta/argument_specs.yml b/roles/edpm_sshd/meta/argument_specs.yml index 613e102f7..57db3b0c2 100644 --- a/roles/edpm_sshd/meta/argument_specs.yml +++ b/roles/edpm_sshd/meta/argument_specs.yml @@ -58,6 +58,7 @@ argument_specs: - 'LC_IDENTIFICATION LC_ALL LANGUAGE' - 'XMODIFIERS' Subsystem: 'sftp /usr/libexec/openssh/sftp-server' + PrintMotd: 'no' edpm_sshd_configure_firewall: type: bool default: false