Signal9Signal9 — home
online
back to labs

STIG: Display the DoD Notice and Consent Banner

EasyLinux Security15 min
The brief

Federal systems must display the Standard Mandatory DoD Notice and Consent Banner before granting access (UBTU-22-255020). The approved text is on this box at /root/case/dod-banner.txt. Put it in /etc/issue (console logins) and /etc/issue.net (network logins), and point sshd at /etc/issue.net with the Banner directive. A generic 'authorized use only' line is not enough: the STIG check compares the full text. Line wrapping can differ; the words and punctuation can't.

What you'll do
  • /etc/issue contains the full DoD Notice and Consent Banner
  • /etc/issue.net contains the full DoD Notice and Consent Banner
  • sshd points at the banner (Banner /etc/issue.net)

Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.