Skip to content
SentriNix

Portfolio entry · C-101

Sample Student

Login banner missing

Guided3.1.9
Server
cui-web01.acme-defense.local
System
Rocky Linux 9 · snx-rocky9-base-2026.11.0
Time to pass
17 min 35 s
Resets · hints
0 · 0

01Controls

  • 3.1.9

    Provide privacy and security notices consistent with applicable CUI rules.

    NIST SP 800-171 Rev 2

02Grader

Passed · 4 of 4 checks · integrity ok · validator v1

Control checks

  • /etc/issue contains the approved notice

    FoundAUTHORIZED USE ONLY. This system processes Controlled Unclassified Information (CUI) for Acme Defense. All activity is m

    See it withcat /etc/issue

  • SSH shows the notice before login

    Foundbanner /etc/issue.net

    See it withsshd -T | grep -i ^banner

Didn't break production

  • sshd config is valid

    Foundok

    See it withsshd -t

  • sshd running on port 22

    Foundactive

    See it withsystemctl status sshd; ss -tlnp | grep :22

03Write-up

Finding
cui-web01 displayed no system use notice. /etc/issue contained the default kernel string and sshd -T returned banner none.
Remediation
Wrote the approved CUI notice to /etc/issue and /etc/issue.net. Added /etc/ssh/sshd_config.d/00-banner.conf with Banner /etc/issue.net. Validated with sshd -t, then reloaded sshd.
Verification
sshd -T returns banner /etc/issue.net. grep -c 'consent to monitoring' returns 1 for both files. An SSH attempt to localhost displays the notice before authentication.
SSP statement
cui-web01 displays the organization's approved CUI system use notice before authentication on the local console (/etc/issue) and for SSH sessions (Banner /etc/issue.net). The notice states that the system is for authorized use only, that activity is monitored, and that use constitutes consent to monitoring.

04Integrity