Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of OpenEmbedded
Services
SSH Server
Configure OpenSSH Server if Necessary
Ensure SSH LoginGraceTime is configured
Ensure SSH LoginGraceTime is configured
An XCCDF Rule
Details
Profiles
Prose
Ensure SSH LoginGraceTime is configured
Medium Severity
The
LoginGraceTime
parameter to the SSH server specifies the time allowed for successful authentication to the SSH server. The longer the Grace period is the more open unauthenticated connections can exist. Like other session controls in this session the Grace Period should be limited to appropriate limits to ensure the service is available for needed access.