STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix OS must limit the number of concurrent sessions to 10 for all accounts and/or account types.

DISA Rule

SV-279528r1192544_rule

Vulnerability Number

V-279528

Group Title

SRG-OS-000027-GPOS-00008

Rule Version

NXAC-OS-000001

Severity

CAT III

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Configure Nutanix OS instances to limit concurrent logins to 10.

1. For AHV, the value of "* hard maxlogins" is set to 10 by the vendor and must not be altered by customers. If the value is not set to the 10, this is an unauthorized modification which may indicate the security settings for the build has been modified. Rebuild the system from source to correct this issue.

2. For AOS, Prism Central, and Files, run the following command.

$ configure_dod_mode.sh enter_dod_mode

Check Contents

For AHV, this requirement is Inherently Met.

For AOS, Prism Central, and Files, run the following command to verify Nutanix OS instances limit concurrent logins to 10 or fewer:

$ sudo grep "maxlogins" /etc/security/limits.conf

If the line "* hard maxlogins 10" is missing, commented out, or set to a number more than 10, this is a finding.

Vulnerability Number

V-279528

Documentable

False

Rule Version

NXAC-OS-000001

Severity Override Guidance

For AHV, this requirement is Inherently Met.

For AOS, Prism Central, and Files, run the following command to verify Nutanix OS instances limit concurrent logins to 10 or fewer:

$ sudo grep "maxlogins" /etc/security/limits.conf

If the line "* hard maxlogins 10" is missing, commented out, or set to a number more than 10, this is a finding.

Check Content Reference

M

Target Key

5730