STIGQter: STIG Summary: VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 31 Oct 2023:

The Photon operating system must limit the number of concurrent sessions to ten for all accounts and/or account types.

DISA Rule

SV-258804r933473_rule

Vulnerability Number

V-258804

Group Title

SRG-OS-000027-GPOS-00008

Rule Version

PHTN-40-000007

Severity

CAT III

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Navigate to and open:

/etc/security/limits.conf

Add or update the following line:

* hard maxlogins 10

Check Contents

At the command line, run the following command to verify the limit for the number of concurrent sessions:

# grep "^[^#].*maxlogins.*" /etc/security/limits.conf

Example result:

* hard maxlogins 10

If "* hard maxlogins" is not configured to "10", this is a finding.

Note: The expected result may be repeated multiple times.

Vulnerability Number

V-258804

Documentable

False

Rule Version

PHTN-40-000007

Severity Override Guidance

At the command line, run the following command to verify the limit for the number of concurrent sessions:

# grep "^[^#].*maxlogins.*" /etc/security/limits.conf

Example result:

* hard maxlogins 10

If "* hard maxlogins" is not configured to "10", this is a finding.

Note: The expected result may be repeated multiple times.

Check Content Reference

M

Target Key

5569