usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-02-03 14:03:24 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

openSSH 9.8 - SC-05 #58

New Issue
Closed
opened 2026-01-19 18:29:05 +00:00 by michael · 3 comments
michael commented 2026-01-19 18:29:05 +00:00
Owner
Copy Link

Originally created by @robertgendler on GitHub.

Originally assigned to: @robertgendler on GitHub.

Configuring persourcepenalties to meet SC-05

Originally created by @robertgendler on GitHub. Originally assigned to: @robertgendler on GitHub. Configuring persourcepenalties to meet SC-05
michael commented 2026-01-19 18:29:06 +00:00
Author
Owner
Copy Link

@robertgendler commented on GitHub:

create check to make sure PerSourcePenalties is not set to no.

@robertgendler commented on GitHub: create check to make sure PerSourcePenalties is not set to no.
michael commented 2026-01-19 18:29:06 +00:00
Author
Owner
Copy Link

@robertgendler commented on GitHub:

fix set PerSourcePenalties to yes

@robertgendler commented on GitHub: fix set PerSourcePenalties to yes
michael commented 2026-01-19 18:29:06 +00:00
Author
Owner
Copy Link

@snoopy82481 commented on GitHub:

Check command and if not true it is a finding.

sshd -G | grep -q 'persourcepenalties crash:90 authfail:5 noauth:1 grace-exceeded:20 max:600 min:15 max-sources4:65536 max-sources6:65536 overflow:permissive overflow6:permissive' && echo "true" || echo "false"
@snoopy82481 commented on GitHub: Check command and if not `true` it is a finding. ```bash sshd -G | grep -q 'persourcepenalties crash:90 authfail:5 noauth:1 grace-exceeded:20 max:600 min:15 max-sources4:65536 max-sources6:65536 overflow:permissive overflow6:permissive' && echo "true" || echo "false" ```
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
michael
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: usnistgov/macos_security#58
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?