The operating system must limit the number of concurrent sessions for each account to an organization defined number of sessions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32941	SRG-OS-000027-NA	SV-43339r1_rule		Medium

Description
Limiting the number of allowed users and sessions per user can limit risks related to Denial of Service attacks. The organization may define the maximum number of concurrent sessions for an information system account globally, by account type, by account, or a combination thereof. Rationale for non-applicability: For the purposes of this SRG, a mobile operating system is assumed to support a single human-accessible user account.

Description

Limiting the number of allowed users and sessions per user can limit risks related to Denial of Service attacks. The organization may define the maximum number of concurrent sessions for an information system account globally, by account type, by account, or a combination thereof. Rationale for non-applicability: For the purposes of this SRG, a mobile operating system is assumed to support a single human-accessible user account.

STIG	Date
Mobile Operating System Security Requirements Guide	2013-07-03

Details

Check Text ( C-41244r1_chk )
This requirement is NA for the Mobile OS SRG.

Fix Text (F-36856r1_fix)
The requirement is NA. No fix is required.