Detections
Analytics
UBTU-22-412010 - Ubuntu 22.04 LTS must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.
Information
Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.Solution
Configure Ubuntu 22.04 LTS to enforce a delay of at least four seconds between logon prompts following a failed logon attempt.Add or modify the following line in the "/etc/pam.d/common-auth" file:
auth required pam_faildelay.so delay=4000000
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_22-04_LTS_V2R8_STIG.zip
Item Details
Audit Name: DISA Canonical Ubuntu 22.04 LTS STIG v2r8
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-260550r991588_rule, STIG-ID|UBTU-22-412010, Vuln-ID|V-260550
Plugin: Unix
Control ID: e38e742238e8aff0f14778bbfed521832460260e72e57fba5fdd91a26bb27e31