Detections
Analytics

1.44 ALMA-09-007500

Information

AlmaLinux OS 9 must automatically lock an account when three unsuccessful logon attempts occur.

GROUP ID: V-269147
RULE ID: SV-269147r1050029

By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-force attacks, is reduced. Limits are imposed by locking the account.

Solution

Configure AlmaLinux OS 9 to lock an account when three unsuccessful logon attempts occur using pam_faillock.

First, enable the feature using the following command:

$ authselect enable-feature with-faillock

Then, add or update the following line in the "/etc/security/faillock.conf" file:

deny = 3

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-7a., CCI|CCI-000044, Rule-ID|SV-269147r1050029_rule, STIG-ID|ALMA-09-007500, Vuln-ID|V-269147

Plugin: Unix

Control ID: 880c312d7bbf27a02a2b69d6b2e83489f45af35287e049634d4c94a30cbad9ec