Detections
Analytics

Catalina - Set Login Grace Time to 30 or Less

Information

If SSHD is enabled then it _MUST_ be configured to wait only 30 seconds before timing out logon attempts.

NOTE: /etc/ssh/sshd_config will be automatically modified to its original state following any update or major upgrade to the operating system.

Solution

[source,bash]
----
/usr/bin/sed -i.bak 's/.*LoginGraceTime.*/LoginGraceTime 30/' /etc/ssh/sshd_config; /bin/launchctl kickstart -k system/com.openssh.sshd
----

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-10, CCE|CCE-84796-2, CCI|CCI-001133, STIG-ID|AOSX-15-000053

Plugin: Unix

Control ID: 4b4117d57693c331dc2f53d6424abef4b41ced5063e9c42aa9105d940b061085