Skip to content

Commit

Permalink
OCPBUGS-28797: Clarify banner instructions for RHCOS nodes
Browse files Browse the repository at this point in the history
The instructions for remediating Linux banners on login was pretty vague
for RHCOS nodes. This commit attempts to clarify that by suggesting the
users can use the default remediation, and tweak it to fit their
use case.
  • Loading branch information
rhmdnd committed Feb 28, 2024
1 parent 2bb366b commit 4879ba6
Showing 1 changed file with 14 additions and 5 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,9 @@ description: |-
{{% if product == "rhcos4" %}}
To configure the system login banner create a file under
<tt>/etc/issue.d</tt>
The Machine Configuration provided with this rule is generic. You may need
to adjust it accordingly to fit your usecase.
{{% else %}}
To configure the system login banner edit <tt>/etc/issue</tt>. Replace the
default text with a message compliant with the local site policy or a legal
Expand Down Expand Up @@ -41,10 +44,15 @@ description: |-
<tt>I've read &amp; consent to terms in IS user agreem't.</tt>
{{% if product == "rhcos4" %}}
<p>
To address this, please create a <tt>Machineconfig</tt> object with the
appropriate text in a drop-in file in <tt>/etc/issue.d/</tt>. Do not try to
edit <tt>/etc/issue</tt> directly as this is a symlink provided by the
Operating System.
To address this, please create a <tt>MachineConfig</tt> object with the
appropriate text in a drop-in file in <tt>/etc/issue.d/</tt>. You can also
use the supplied remediation, which will be available based on scan results
using `oc get remediations`. The default remediation is opinionated and you
may need to adjust the <tt>MachineConfig</tt> accordingly for your use
case.
Do not try to edit <tt>/etc/issue</tt> directly as this is a symlink
provided by the Operating System.
</p>
<p>
For example, if you're using the DoD required text, the manifest would
Expand All @@ -56,7 +64,8 @@ description: |-
metadata:
labels:
machineconfiguration.openshift.io/role: master
name: 75-master-etc-issue
machineconfiguration.openshift.io/role: worker
name: 75-banner-etc-issue
spec:
config:
ignition:
Expand Down

0 comments on commit 4879ba6

Please sign in to comment.