OK. I was mostly looking for a scorable control(s).
On 8/14/15 2:34 PM, Paul Whitney wrote:
I use pam_tally2 for that.
Paul Whitney
email: paul.whitney(a)mac.com
cell: 410.493.9448
Sent from my iPhone
> On Aug 14, 2015, at 13:47, Ron Colvin <Ron.Colvin(a)nasa.gov> wrote:
>
> A patch for the SSH bug that bypassed the MaxAuthTries limit was just patched. Has
MaxAuthTries been considered as a control in the security guide?
>
>
http://www.openssh.com/txt/release-7.0
>
https://threatpost.com/openssh-7-0-fixes-four-flaws/114265
>
> --
>
>
> ********************************************************
> Ron Colvin CISSP, CAP, CEH
> Certified Security Analyst
> NASA - Goddard Space Flight Center
> <ron.colvin(a)nasa.gov>
> Direct phone 301-286-2451
> NASA Jabber (rdcolvin(a)im.nasa.gov) AIM rcolvin13
> NASA LCS (ronald.d.colvin(a)nasa.gov)
> ********************************************************
>
>
--
********************************************************
Ron Colvin CISSP, CAP, CEH
Certified Security Analyst
NASA - Goddard Space Flight Center
<ron.colvin(a)nasa.gov>
Direct phone 301-286-2451
NASA Jabber (rdcolvin(a)im.nasa.gov) AIM rcolvin13
NASA LCS (ronald.d.colvin(a)nasa.gov)
********************************************************