Fun with limits.conf

fcaviggi at redhat.com fcaviggi at redhat.com
Mon Sep 30 15:28:04 UTC 2013


All,

Most of the guidance for RHEL security has suggested setting the 
following in /etc/security/limits.conf:

         *    hard    core    0

I have generally set this to:

         *    -    core    0

Because this sets both the hard and soft limits on the system. Most SCAP 
scanners are looking for very specific values there.  I'm looking at 
modifying the checks to pass either 'hard' or '-' for the value.

I'd also to fix the maxlogins in the rule 
(*max_concurrent_login_sessions*) in /etc/security/limits.conf to look 
for the DOD default (10) and lower to satisfy the check. Security 
standards are there as a baseline, why 'fail' the setting for exceeding 
the baseline value?

Regards,

Frank Caviggia

-- 
Frank Caviggia
Consultant, Public Sector
fcaviggi at redhat.com
(M) (571) 295-4560

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130930/74ad52ec/attachment.html>


More information about the scap-security-guide mailing list