From 7173da8af591d5d3b7c2c734b6e2e0a706b5bdcc Mon Sep 17 00:00:00 2001 From: Brian Dwyer Date: Wed, 13 Jan 2021 12:00:46 -0500 Subject: [PATCH] reduce max startups in accordance with current cis benchmark ref: https://github.com/dev-sec/ssh-baseline/pull/186 Signed-off-by: Brian Dwyer --- attributes/default.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/attributes/default.rb b/attributes/default.rb index e5c800b..6bd9418 100644 --- a/attributes/default.rb +++ b/attributes/default.rb @@ -113,7 +113,7 @@ server['login_grace_time'] = '30s' server['max_auth_tries'] = 2 server['max_sessions'] = 10 - server['max_startups'] = '10:30:100' + server['max_startups'] = '10:30:60' server['password_authentication'] = false server['log_level'] = 'verbose' server['accept_env'] = ['LANG', 'LC_*', 'LANGUAGE']