V-256481

Discussion

Operating system management includes the ability to control the number of users and user sessions that utilize an operating system. Limiting the number of allowed users and sessions per user is helpful in reducing the risks related to denial-of-service attacks.

Check Content

At the command line, run the following command:

#  grep "^[^#].*maxlogins.*" /etc/security/limits.conf

Expected result:

*       hard    maxlogins       10

If the output does not match the expected result, this is a finding.

Note: The expected result may be repeated multiple times.