Merge pull request #273 from ancoron/feature/ubuntu-dynamic-motd-banner

Disable also dynamic MOTD via PAM if enabled - refs #271
dev-sec · Apr 18, 2020 · 3de3975 · 3de3975
2 parents 4a97d4d + b014b62
commit 3de3975
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/tasks/hardening.yml b/tasks/hardening.yml
@@ -41,6 +41,18 @@
   notify: restart sshd
   when: ssh_server_hardening | bool
 
+- name: disable dynamic MOTD
+  pamd:
+    name: sshd
+    type: session
+    control: optional
+    module_path: pam_motd.so
+    state: absent
+  when:
+    - ssh_server_hardening | bool
+    - ssh_pam_support | bool
+    - not (ssh_print_motd | bool)
+
 - name: create ssh_config and set permissions to root/644
   template:
     src: 'openssh.conf.j2'