How long does the integration take?

Change one base URL in an OpenAI-compatible client, or install the Python or TypeScript SDK; the quickstart routes a first request in a few minutes.

Will this lock us into another vendor?

No. The router is Apache-2.0 open source, your provider keys stay yours, and the API is OpenAI-compatible, so leaving is a change of base URL.

What happens when a provider fails?

The router falls back to the next model your policy allows and records the fallback in the trace, so an outage costs a retry, not an incident.

cis-ubuntu1604-v200-1-7-3 - Skill

Name: cis-ubuntu1604-v200-1-7-3
Author: node011

Imported from node011/Bounty-Reaper (.bountyreper/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-16-04-lts-benchmark-v2/cis-ubuntu1604-v200-1-7-3/SKILL.md). Install upstream with npx skills add node011/Bounty-Reaper --skill cis-ubuntu1604-v200-1-7-3. Copyright stays with the author (CC-BY-NC-SA-4.0).

CIS Ubuntu Linux 16.04 LTS Benchmark v2.0.0 - 1.7.3

Profile Applicability

Level 1 - Server
Level 1 - Workstation

Description

The contents of the /etc/issue.net file are displayed to users prior to login for remote connections from configured services.

Unix-based systems have typically displayed information about the OS release and patch level upon logging in to the system. This information can be useful to developers who are developing software for a particular OS platform. If mingetty(8) supports the following options, they display operating system information: \m - machine architecture \r - operating system release \s - operating system name \v - operating system version

Rationale

Warning messages inform users who are attempting to login to the system of their legal status regarding the system and must include the name of the organization that owns the system and any monitoring policies that are in place. Displaying OS and patch level information in login banners also has the side effect of providing detailed system information to attackers attempting to target specific exploits of a system. Authorized users can easily get this information by running the uname -a command once they have logged in.

Audit Procedure

Command Line

Run the following command and verify that the contents match site policy:

cat /etc/issue.net

Run the following command and verify no results are returned:

grep -E -i "(\\v|\\r|\\m|\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue.net

Expected Result

The /etc/issue.net file should contain an appropriate warning banner without OS information references.

Remediation

Command Line

Edit the /etc/issue.net file with the appropriate contents according to your site policy, remove any instances of \m, \r, \s, \v or references to the OS platform:

echo "Authorized uses only. All activity may be monitored and reported." > /etc/issue.net

Default Value

Not applicable.

References

None.

CIS Controls

Controls Version	Control
v7	5.1 Establish Secure Configurations

Assessment Status

Automated

Install cis-ubuntu1604-v200-1-7-3 and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "node011-bounty-reaper-cis-ubuntu1604-v200-1-7-3", "kind": "skill", "name": "cis-ubuntu1604-v200-1-7-3", "description": "Ensure remote login warning banner is configured properly", "publisher": "node011", "version": "1.0.0", "capabilities": { "domains": [ "general" ], "tags": [ "skill-md", "cis", "ubuntu", "linux", "ubuntu-16-04", "issue-net", "banner", "warning", "login", "remote" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Ensure remote login warning banner is configured properly" ], "primary": false, "metadata": { "source": { "provider": "github", "repository": "https://github.com/node011/Bounty-Reaper", "path": ".bountyreper/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-16-04-lts-benchmark-v2/cis-ubuntu1604-v200-1-7-3/SKILL.md", "ref": "4c98784194514df06cd25ff18978d103f7485fb6", "url": "https://github.com/node011/Bounty-Reaper/blob/4c98784194514df06cd25ff18978d103f7485fb6/.bountyreper/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-16-04-lts-benchmark-v2/cis-ubuntu1604-v200-1-7-3/SKILL.md", "key": "node011/Bounty-Reaper/.bountyreper/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-16-04-lts-benchmark-v2/cis-ubuntu1604-v200-1-7-3/SKILL.md" }, "license": "CC-BY-NC-SA-4.0" }, "instructions": "# CIS Ubuntu Linux 16.04 LTS Benchmark v2.0.0 - 1.7.3\n\n## Profile Applicability\n\n- Level 1 - Server\n- Level 1 - Workstation\n\n## Description\n\nThe contents of the `/etc/issue.net` file are displayed to users prior to login for remote connections from configured services.\n\nUnix-based systems have typically displayed information about the OS release and patch level upon logging in to the system. This information can be useful to developers who are developing software for a particular OS platform. If `mingetty(8)` supports the following options, they display operating system information: `\\m` - mac", "cost": { "context_tokens": 576 } }

cis-ubuntu1604-v200-1-7-3

About

CIS Ubuntu Linux 16.04 LTS Benchmark v2.0.0 - 1.7.3

Profile Applicability

Description

Rationale

Audit Procedure

Command Line

Expected Result

Remediation

Command Line

Default Value

References

CIS Controls

Assessment Status

Install cis-ubuntu1604-v200-1-7-3 and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Use it

Manifest

Reviews