CIS Ubuntu 14.04 LTS - 5.2.5 Ensure SSH MaxAuthTries is set to 4 or less
Verify SSH MaxAuthTries is set to 4 or less to limit brute force attack risk
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
CIS Ubuntu 14.04 LTS - 5.2.6 Ensure SSH IgnoreRhosts is enabled
Verify SSH IgnoreRhosts is set to yes to prevent .rhosts-based authentication
1.21k repo starsObserved in 1 repos
DevOps & Security
CIS Ubuntu 14.04 LTS - 5.2.7 Ensure SSH HostbasedAuthentication is disabled
Verify SSH HostbasedAuthentication is disabled to prevent host-based trust authentication
1.21k repo starsObserved in 1 repos
DevOps & Security
CIS Ubuntu 14.04 LTS - 5.2.8 Ensure SSH root login is disabled
Verify SSH PermitRootLogin is set to no to prevent direct root login over SSH
1.21k repo starsObserved in 1 repos
DevOps & Security
CIS Ubuntu 14.04 LTS - 5.2.9 Ensure SSH PermitEmptyPasswords is disabled
Verify SSH PermitEmptyPasswords is set to no to prevent login with empty passwords
1.21k repo starsObserved in 1 repos
DevOps & Security
CIS Ubuntu 14.04 LTS - 5.3.2 Ensure lockout for failed password attempts is configured
Verify PAM is configured to lock out users after repeated failed password attempts
1.21k repo starsObserved in 1 repos
DevOps & Security
CIS Ubuntu 14.04 LTS - 5.3.3 Ensure password reuse is limited
Verify PAM is configured to remember at least 5 previous passwords to prevent reuse
1.21k repo starsObserved in 1 repos
DevOps & Security
CIS Ubuntu 14.04 LTS - 5.3.4 Ensure password hashing algorithm is SHA-512
Verify PAM is configured to use SHA-512 hashing algorithm for password storage
1.21k repo starsObserved in 1 repos
DevOps & Security
CIS Ubuntu 14.04 LTS - 5.4.1.1 Ensure password expiration is 365 days or less
Verify PASS_MAX_DAYS is set to 365 or less in /etc/login.defs for password expiration
1.21k repo starsObserved in 1 repos
DevOps & Security
CIS Ubuntu 14.04 LTS - 5.4.1.2 Ensure minimum days between password changes is 7 or more
Verify PASS_MIN_DAYS is set to 7 or more in /etc/login.defs to prevent rapid password cycling
1.21k repo starsObserved in 1 repos
DevOps & Security