Detections
Analytics
AZLX-23-002405 - Amazon Linux 2023 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.
Information
Increasing the time between a failed authentication attempt and re-prompting to enter credentials helps to slow a single-threaded brute force attack.Solution
Configure Amazon Linux 2023 to enforce a delay of at least four seconds between logon prompts following a failed console logon attempt.Modify the "/etc/login.defs" file to set the "FAIL_DELAY" parameter to "4" or greater:
FAIL_DELAY 4
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Amazon_Linux_2023_V1R4_STIG.zip
Item Details
Audit Name: DISA Amazon Linux 2023 STIG v1r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-274144r1120420_rule, STIG-ID|AZLX-23-002405, Vuln-ID|V-274144
Plugin: Unix
Control ID: be4af28e03ca1d9b7447db33846ef4c719359892536541468c961ad37bae0536