UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The SSH daemon LoginGraceTime must be set correctly.


Overview

Finding ID Version Rule ID IA Controls Severity
V-51353 OSX8-00-00945 SV-65563r1_rule Low
Description
LoginGraceTime must be securely configured in /etc/sshd_config.
STIG Date
Apple OS X 10.8 (Mountain Lion) Workstation STIG 2015-02-10

Details

Check Text ( C-53697r1_chk )
To check the amount of time that a user can login through SSH, run the following command:

grep LoginGraceTime /etc/sshd_config

If the value is not set to "30" or less, this is a finding.
Fix Text (F-56153r1_fix)
In order to make sure that LoginGraceTime is configured correctly, run the following command:

sudo sed -i.bak 's/.*LoginGraceTime.*/LoginGraceTime 30/' /etc/sshd_config