From owner-freebsd-questions@FreeBSD.ORG Mon Sep 15 13:12:45 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4884716A4BF for ; Mon, 15 Sep 2003 13:12:45 -0700 (PDT) Received: from megs19.100mwh.com (megs19.100mwh.com [209.151.94.27]) by mx1.FreeBSD.org (Postfix) with ESMTP id 872AE43F85 for ; Mon, 15 Sep 2003 13:12:44 -0700 (PDT) (envelope-from rseals@vdsi.net) Received: from [204.193.75.20] (helo=[10.200.10.14]) by megs19.100mwh.com with asmtp (Exim 4.20) id 19yziD-0001QW-Tf; Mon, 15 Sep 2003 14:12:42 -0600 From: Ray Seals To: Kris Kennaway In-Reply-To: <20030915184839.GC6885@rot13.obsecurity.org> References: <1063399454.293.5.camel@rsealslaptop.magellanhealth.com> <20030912223142.GC68304@happy-idiot-talk.infracaninophile.co.uk> <1063636531.287.2.camel@rsealslaptop.magellanhealth.com> <20030915184839.GC6885@rot13.obsecurity.org> Content-Type: text/plain Organization: Message-Id: <1063656756.287.6.camel@rsealslaptop.magellanhealth.com> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.2.2 Date: 15 Sep 2003 15:12:37 -0500 Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - megs19.100mwh.com X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - vdsi.net cc: FreeBSD Questions Subject: Re: Securing the FreeBSD Console by removing OS Version X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Sep 2003 20:12:45 -0000 On Mon, 2003-09-15 at 13:48, Kris Kennaway wrote: > You realise that if someone can log in to the system they can > trivially discover the OS and OS version by querying the kernel? As a > "security measure" this change has zero benefit. > Yes, uname -a will do the trick. Here is what I wanted. I did not want the version to pop up on the console after boot. So I added the clear command to the /etc/issue. So, I want the console to look like this after the system is up and booted: -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- security mumbo jumbo -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Login: Ray Seals