Details

Operating system management includes the ability to control the number of users and user sessions that utilize an operating system. Limiting the number of allowed users and sessions per user is helpful in reducing the risks related to denial-of-service attacks.

Solution

At the command line, execute the following command:

# echo ‘* hard maxlogins 10’ >> /etc/security/limits.conf

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-7_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-10
• CAT|II
• CCI|CCI-000054
• Rule-ID|SV-239076r675036_rule
• STIG-ID|PHTN-67-000004
• Vuln-ID|V-239076

Source

• Tenable.com/audits