Limit Consecutive Login Attempts for SSH

MittelStufe 1Automatisiertsolaris

Beschreibung

The 'MaxAuthTries' parameter in the /etc/ssh/sshd_config file specifies the maximum number of authentication attempts permitted per connection. By restricting the number of failed authentication attempts before the server terminates the connection, malicious users are blocked from gaining access to the host by using repetitive brute-force login exploits. Audit: MaxAuthTries must be 6 or less, or commented out (default 6).

So wird geprüft

Prüfmethode: Dateimuster

Datei: /etc/ssh/sshd_config
Muster: (?m)^\s*MaxAuthTries\s+([7-9]|[1-9][0-9]+)\b

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Perform the following to implement the recommended state: # awk '/MaxAuthTries/ { $1 = "MaxAuthTries"; $2 = "6" } { print }' /etc/ssh/sshd_config > /etc/ssh/sshd_config.CIS # mv /etc/ssh/sshd_config.CIS /etc/ssh/sshd_config # svcadm restart svc:/network/ssh

Eigenschaften

Betriebssysteme: Beliebig
Tags: solarisssh
Referenz: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 6.12 Limit Consecutive Login Attempts for SSH

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target solaris