Detections
Analytics

3.4.1 /etc/security/login.cfg - logintimeout - logintimeout

Information

Defines the number of seconds during which the password must be typed at login.

Rationale:

In setting the logintimeout attribute, a password must be entered within a specified time period.

Solution

In /etc/security/login.cfg, set the usw stanza logintimeout attribute to 30 or less:

chsec -f /etc/security/login.cfg -s usw -a logintimeout=30

This means that a user will have 30 seconds, from prompting, in which to type in their password.

Default Value:

60

See Also

https://workbench.cisecurity.org/files/4119

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-2(5), 800-53|AC-11, 800-53|AC-11(1), 800-53|AC-12, CSCv7|16.11

Plugin: Unix

Control ID: 7ded2d540b300e4a8da0fd45d15437610ca02d1d5d1aba8c30f7b90bbc1f7984