Detections
Analytics

1.63 UBTU-24-300017

Information

The operating system must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.

GROUP ID: V-270706
RULE ID: SV-270706r1068361

Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.

Solution

Configure the operating system to enforce a delay of at least four seconds between logon prompts following a failed logon attempt.

Add or modify the following line in the "/etc/pam.d/common-auth" file:

auth required pam_faildelay.so delay=4000000

See Also

https://workbench.cisecurity.org/benchmarks/22775

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, CSCv7|5.1, Rule-ID|SV-270706r1068361_rule, STIG-ID|UBTU-24-300017, Vuln-ID|V-270706

Plugin: Unix

Control ID: 243b22b9aa251f17b1c7dbbebbec7c62a6a5e182546a7aef23691910723b4740