Detections
Analytics
1.411 OL09-00-003070
Information
OL 9 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.GROUP ID: V-271850
RULE ID: SV-271850r1092262
Increasing the time between a failed authentication attempt and reprompting to enter credentials helps to slow a single-threaded brute force attack.
Solution
Configure the OL 9 to enforce a delay of at least four seconds between logon prompts following a failed console logon attempt.Modify the "/etc/login.defs" file to set the "FAIL_DELAY" parameter to 4 or greater:
FAIL_DELAY 4
See Also
Item Details
Audit Name: CIS Oracle Linux 9 STIG v1.0.0 CAT II
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271850r1092262_rule, STIG-ID|OL09-00-003070, Vuln-ID|V-271850
Plugin: Unix
Control ID: 412c7a9bf6a2da323e6be52ec90e665390eee635784c483f034f1854b75b7425