Login security

[Dave Close]

Does anyone know of any way to totally disable all announcements prior to
successful user login?

Perhaps I am unusual (some experience suggests that's obvious).  I believe
that any system with a dial-in connection should insist that callers
identify themselves before the system gives out ANY information.  In
particular, it seems to me to be bad form for a system to answer an incoming
call by announcing the type of system, the release number, and (even, or
especially) the owner.  Although, perhaps not so critical, I try to apply
this preference to all login connections, locally attached terminals, telnet
users, etc.

As I received it, SVr4v2 announced quite a bit before prompting for a user
name.  I have renamed the /etc/issue file without adverse effect; this
eliminates most of the announcements.  However, the string "System name: ..."
is still produced by the /usr/lib/saf/ttymon program and "UNIX(r) System V
Release 4.0 (system... )" is still produced by /usr/sbin/in.telnetd.  Perhaps
there are other announcements I haven't either noticed or located as yet.
-- 
       	Dave Close         Shared Financial Systems          Dallas
        	davec at shared.com       vmail +1 214 458 3850
        	uunet!shared!davec       fax +1 214 458 3876
	My comments are my opinions and may not be shared by Shared.