Detections
Analytics

1.114 ALMA-09-015640

Information

AlmaLinux OS 9 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.

GROUP ID: V-269217
RULE ID: SV-269217r1050099

Increasing the time between a failed authentication attempt and prompting to re-enter credentials helps to slow a single-threaded brute force attack.

Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000480-GPOS-00226

Solution

Configure the AlmaLinux OS 9 to enforce a delay of at least four seconds between logon prompts following a failed console logon attempt.

Modify the "/etc/login.defs" file to set the "FAIL_DELAY" parameter to 4 or greater:

FAIL_DELAY 4

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269217r1050099_rule, STIG-ID|ALMA-09-015640, Vuln-ID|V-269217

Plugin: Unix

Control ID: fdf3d879de63952ebe5d26b6920b7a1ba6b5cc14af93e39b2f56725c19f4ac2d