Detections
Analytics
UBTU-24-300017 - Ubuntu 24.04 LTS must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.
Information
Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.The delay option is set in microseconds.
Solution
Configure Ubuntu 24.04 LTS to enforce a delay of at least four seconds between logon prompts following a failed logon attempt.Edit the file "/etc/pam.d/common-auth" and set the parameter "pam_faildelay" to a value of "4000000" or greater:
auth required pam_faildelay.so delay=4000000
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_24-04_LTS_V1R6_STIG.zip
Item Details
Audit Name: DISA Canonical Ubuntu 24.04 LTS STIG v1r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-270706r1068361_rule, STIG-ID|UBTU-24-300017, Vuln-ID|V-270706
Plugin: Unix
Control ID: 243ff1115af1ad9479b2b004c98746bf14ec655f893e49c7699e887fdc9dd291