Limit Consecutive Login Attempts for SSH

SrednjaNivo 1Automatskasolaris

Opis

The 'MaxAuthTries' parameter in the /etc/ssh/sshd_config file specifies the maximum number of authentication attempts permitted per connection. By restricting the number of failed authentication attempts before the server terminates the connection, malicious users are blocked from gaining access to the host by using repetitive brute-force login exploits. Audit: MaxAuthTries must be 6 or less, or commented out (default 6).

Kako se proverava

Metod provere: Obrazac u datoteci

Datoteka: /etc/ssh/sshd_config
Obrazac: (?m)^\s*MaxAuthTries\s+([7-9]|[1-9][0-9]+)\b

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Perform the following to implement the recommended state: # awk '/MaxAuthTries/ { $1 = "MaxAuthTries"; $2 = "6" } { print }' /etc/ssh/sshd_config > /etc/ssh/sshd_config.CIS # mv /etc/ssh/sshd_config.CIS /etc/ssh/sshd_config # svcadm restart svc:/network/ssh

Svojstva

Operativni sistemi: Bilo koji
Oznake: solarisssh
Referenca: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 6.12 Limit Consecutive Login Attempts for SSH

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target solaris