Re: [osol-discuss] Re: limit number of sftp/scp sessions

2007-04-17 Thread Darren J Moffat
Ben wrote: We currently use ssh in our system and are investigating ways to fulfill an Application STIG requirement. Here's the req APP0530:Session limits do not exist for the application. Its actually a checklist item to determine if you have a security finding. That's why it looks

[osol-discuss] Re: limit number of sftp/scp sessions

2007-04-17 Thread Ben
We currently use ssh in our system and are investigating ways to fulfill an Application STIG requirement. Here's the req APP0530:Session limits do not exist for the application. Its actually a checklist item to determine if you have a security finding. That's why it looks like a negat

[osol-discuss] Re: limit number of sftp/scp sessions

2007-04-16 Thread Richard L. Hamilton
I don't see any feature of sshd that provides for limiting the number of sessions. I suspect it wouldn't be all that difficult to add such a feature. There is a feature to limit the number of sessions that have not yet completed the authentication phase, but I don't know how much that would help y

[osol-discuss] Re: limit number of sftp/scp sessions

2007-04-16 Thread Ben
Since all these services are derivatives of ssh, then ideally I'd like to limit ssh, and I have a workaround for ssh. I can limit ssh sessions by limiting the number of ptys in /etc/system. Am I missing some way to limit ssh as a whole? This message posted from opensolaris.org _

[osol-discuss] Re: limit number of sftp/scp sessions

2007-04-13 Thread Rayson Ho
> I'm looking for a way to limit the number of > authenticated sftp/scp sessions that are allowed to > connect to my box. AFAIK, there is no point to limit the number of sftp/scp sessions *without* also limiting the number of ssh connections. Users can use ssh in many creative ways to get around

[osol-discuss] Re: limit number of sftp/scp sessions

2007-04-11 Thread Ben
We actually have this issue in Solaris 10 as well, we just don't have to address it yet. So can this be solved in Solaris 10? This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org