diff --git a/doc/puppet_classes/confdroid_ssh_3A_3Aparams.html b/doc/puppet_classes/confdroid_ssh_3A_3Aparams.html index 8a474e8..dd5db69 100644 --- a/doc/puppet_classes/confdroid_ssh_3A_3Aparams.html +++ b/doc/puppet_classes/confdroid_ssh_3A_3Aparams.html @@ -1150,6 +1150,24 @@ —

setting for sshd_config. Default is ‘none’, which means that no version addendum will be included in the SSH banner, but can be set to a custom string if you want to include additional information in the SSH version banner. This can be used for branding purposes, but should be used with caution as it can potentially leak information about the server that could be useful to attackers.

+
+ + + +
  • + + ssh_banner + + + (String) + + + (defaults to: 'none') + + + — +
    +

    setting for sshd_config. Default is ‘none’, which means that no banner will be displayed to users when they connect, but can be set to a valid file path if you want to display a custom banner message to users when they connect. This can be used to display legal notices, security warnings, or other information to users when they connect to the SSH server.

  • @@ -1165,12 +1183,6 @@
     
     
    -188
    -189
    -190
    -191
    -192
    -193
     194
     195
     196
    @@ -1250,10 +1262,17 @@
     270
     271
     272
    -273
    +273 +274 +275 +276 +277 +278 +279 +280 -
    # File 'manifests/params.pp', line 188
    +        
    # File 'manifests/params.pp', line 194
     
     class confdroid_ssh::params (
     
    @@ -1319,6 +1338,7 @@ class confdroid_ssh::params (
       String  $ssh_permit_tunnel                = 'no',
       String  $ssh_chroot_directory             = 'none',
       String  $ssh_version_addendum             = 'none',
    +  String  $ssh_banner                       = 'none',
     
     ) {
     # default facts
    diff --git a/manifests/params.pp b/manifests/params.pp
    index 7eb6436..6161639 100644
    --- a/manifests/params.pp
    +++ b/manifests/params.pp
    @@ -184,6 +184,12 @@
     #   additional information in the SSH version banner. This can be used for
     #   branding purposes, but should be used with caution as it can potentially
     #   leak information about the server that could be useful to attackers.
    +# @param [String] ssh_banner setting for sshd_config.
    +#   Default is 'none', which means that no banner will be displayed to users
    +#   when they connect, but can be set to a valid file path if you want to
    +#   display a custom banner message to users when they connect. This can be used
    +#   to display legal notices, security warnings, or other information to users when
    +#   they connect to the SSH server.
     ##############################################################################
     class confdroid_ssh::params (
     
    @@ -249,6 +255,7 @@ class confdroid_ssh::params (
       String  $ssh_permit_tunnel                = 'no',
       String  $ssh_chroot_directory             = 'none',
       String  $ssh_version_addendum             = 'none',
    +  String  $ssh_banner                       = 'none',
     
     ) {
     # default facts
    diff --git a/templates/sshd_custom_conf.erb b/templates/sshd_custom_conf.erb
    index 453bc98..530322a 100644
    --- a/templates/sshd_custom_conf.erb
    +++ b/templates/sshd_custom_conf.erb
    @@ -67,4 +67,6 @@ PidFile <%= @ssh_pid_file %>
     MaxStartups <%= @ssh_max_startups %>
     PermitTunnel <%= @ssh_permit_tunnel %>
     ChrootDirectory <%= @ssh_chroot_directory %>
    -VersionAddendum <%= @ssh_version_addendum %>
    \ No newline at end of file
    +VersionAddendum <%= @ssh_version_addendum %>
    +
    +Banner <%= @ssh_banner %>
    \ No newline at end of file