Detections
Analytics

AIX7-00-003029 - AIX must enforce a delay of at least 4 seconds between login prompts following a failed login attempt.

Information

Limiting the number of login attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.

Solution

From the command prompt, run the following command to set "logindelay=4" for the default stanza in "/etc/security/login.cfg":
# chsec -f /etc/security/login.cfg -s default -a logindelay=4

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215337r991588_rule, STIG-ID|AIX7-00-003029, STIG-Legacy|SV-101667, STIG-Legacy|V-91569, Vuln-ID|V-215337

Plugin: Unix

Control ID: cfa783ffb69744a4c03e227d40a3db5ebe0730904974902027019f2c875349f1