STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 must display the Standard Mandatory DOD Notice and Consent Banner before granting access via SSH.

DISA Rule

SV-261329r1186207_rule

Vulnerability Number

V-261329

Group Title

SRG-OS-000023-GPOS-00006

Rule Version

SLEM-05-255020

Severity

CAT II

CCI(s)

• CCI-000048 - Display an organization-defined system use notification message or banner to users before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidelines.

Weight

10

Fix Recommendation

Add or modify the following line in the "/etc/ssh/sshd_config" file:

Banner /etc/ssh/dod_banner

Restart the "sshd.service" to use the new file location:

> sudo systemctl restart sshd.service

Check Contents

Verify SLEM 5 displays the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via SSH with the following command:

> sudo /usr/sbin/sshd -dd 2>&1 | awk '/filename/ {print $4}' | tr -d '\r' | tr '\n' ' ' | xargs sudo grep -iH '^\s*banner'
/etc/ssh/sshd_config:Banner /etc/ssh/dod_banner

If "Banner" is commented out or missing, or if the location returned will be overridden by package updates, this is a finding.

Note: The file /etc/issue is overridden by package updates and will not maintain the banner text as it does in other Linux distributions.

Vulnerability Number

V-261329

Documentable

False

Rule Version

SLEM-05-255020

Severity Override Guidance

Verify SLEM 5 displays the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via SSH with the following command:

> sudo /usr/sbin/sshd -dd 2>&1 | awk '/filename/ {print $4}' | tr -d '\r' | tr '\n' ' ' | xargs sudo grep -iH '^\s*banner'
/etc/ssh/sshd_config:Banner /etc/ssh/dod_banner

If "Banner" is commented out or missing, or if the location returned will be overridden by package updates, this is a finding.

Note: The file /etc/issue is overridden by package updates and will not maintain the banner text as it does in other Linux distributions.

Check Content Reference

M

Target Key

5596