STIGQter: STIG Summary: Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

Ubuntu 22.04 LTS must limit the number of concurrent sessions to ten for all accounts and/or account types.

DISA Rule

SV-260552r958398_rule

Vulnerability Number

V-260552

Group Title

SRG-OS-000027-GPOS-00008

Rule Version

UBTU-22-412020

Severity

CAT III

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Configure Ubuntu 22.04 LTS to limit the number of concurrent sessions to 10 for all accounts and/or account types.

Add or modify the following line at the top of the "/etc/security/limits.conf" file:

* hard maxlogins 10

Check Contents

Verify Ubuntu 22.04 LTS limits the number of concurrent sessions to 10 for all accounts and/or account types by using the following command:

$ sudo grep -r -s '^[^#].*maxlogins' /etc/security/limits.conf /etc/security/limits.d/*.conf
/etc/security/limits.conf:* hard maxlogins 10

If "maxlogins" does not have a value of "10" or less, is commented out, or is missing, this is a finding.

Vulnerability Number

V-260552

Documentable

False

Rule Version

UBTU-22-412020

Severity Override Guidance

Verify Ubuntu 22.04 LTS limits the number of concurrent sessions to 10 for all accounts and/or account types by using the following command:

$ sudo grep -r -s '^[^#].*maxlogins' /etc/security/limits.conf /etc/security/limits.d/*.conf
/etc/security/limits.conf:* hard maxlogins 10

If "maxlogins" does not have a value of "10" or less, is commented out, or is missing, this is a finding.

Check Content Reference

M

Target Key

5594