Sorry for the double post. I just wanted to make sure that the presence of
the 'soft' line didn't throw an error.
On Sat, Oct 5, 2013 at 9:35 PM, Trevor Vaughan <tvaughan(a)onyxpoint.com>wrote:
As a note, both:
* - core 0
AND
* hard core 0
* soft core 0
Should pass.
Trevor
On Mon, Sep 30, 2013 at 11:28 AM, <fcaviggi(a)redhat.com> wrote:
> All,
>
> Most of the guidance for RHEL security has suggested setting the
> following in /etc/security/limits.conf:
>
> * hard core 0
>
> I have generally set this to:
>
> * - core 0
>
> Because this sets both the hard and soft limits on the system. Most SCAP
> scanners are looking for very specific values there. I'm looking at
> modifying the checks to pass either 'hard' or '-' for the value.
>
> I'd also to fix the maxlogins in the rule (*max_concurrent_login_sessions
> *) in /etc/security/limits.conf to look for the DOD default (10) and
> lower to satisfy the check. Security standards are there as a baseline, why
> 'fail' the setting for exceeding the baseline value?
>
> Regards,
>
> Frank Caviggia
>
> --
> Frank Caviggia
> Consultant, Public Sectorfcaviggi(a)redhat.com
> (M) (571) 295-4560
>
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide(a)lists.fedorahosted.org
>
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>
>
--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699
tvaughan(a)onyxpoint.com
-- This account not approved for unencrypted proprietary information --
--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699
tvaughan(a)onyxpoint.com
-- This account not approved for unencrypted proprietary information --