Skip to content

Commit 438eb27

Browse files
Update MaxStartups to 10:30:60 per CIS 5.1.18 benchmark recommendation
- Change MaxStartups from default 10:30:100 to 10:30:60 in sshd_config - Update corresponding rspec test assertion
1 parent d7d1ca4 commit 438eb27

2 files changed

Lines changed: 3 additions & 3 deletions

File tree

bosh-stemcell/spec/support/os_image_shared_examples.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -238,8 +238,8 @@
238238
expect(sshd_config.content).to match(/^MaxAuthTries 3$/)
239239
end
240240

241-
it "sets MaxStartups to 10:30:100" do
242-
expect(sshd_config.content).to match(/^MaxStartups 10:30:100$/)
241+
it "sets MaxStartups to 10:30:60" do
242+
expect(sshd_config.content).to match(/^MaxStartups 10:30:60$/)
243243
end
244244

245245
it "sets PermitEmptyPasswords to no (stig: V-38614)" do

stemcell_builder/stages/base_ssh/apply.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ sed "/^ *MaxAuthTries/d" -i $chroot/etc/ssh/sshd_config
2525
echo 'MaxAuthTries 3' >> $chroot/etc/ssh/sshd_config
2626

2727
sed "/^ *MaxStartups/d" -i $chroot/etc/ssh/sshd_config
28-
echo 'MaxStartups 10:30:100' >> $chroot/etc/ssh/sshd_config
28+
echo 'MaxStartups 10:30:60' >> $chroot/etc/ssh/sshd_config
2929

3030
sed "/^ *PermitEmptyPasswords/d" -i $chroot/etc/ssh/sshd_config
3131
echo 'PermitEmptyPasswords no' >> $chroot/etc/ssh/sshd_config

0 commit comments

Comments
 (0)