Actions
Bug #3840
closed
JP
RB
Disable (or give the option to disable) the OS addition to the SSH daemon banner
Bug #3840:
Disable (or give the option to disable) the OS addition to the SSH daemon banner
Start date:
08/29/2014
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:
All
Description
By default ssh on FreeBSD adds a VersionAddendum of the FreeBSD version in use. It would be best to hide that to avoid broadcasting the OS version to anyone who can connect to the SSH port.
We can add a line with the VersionAddendum directive only (no parameters) to use an empty version
: nc localhost 22
SSH-2.0-OpenSSH_5.4p1_hpn13v11 FreeBSD-20100308
^C
: echo VersionAddendum >> /etc/sshd_config
: killall -HUP sshd
: nc localhost 22
SSH-2.0-OpenSSH_5.4p1_hpn13v11
^C
Actions