Detections
Analytics
OL09-00-003070 - OL 9 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.
Information
Increasing the time between a failed authentication attempt and reprompting to enter credentials helps to slow a single-threaded brute force attack.Solution
Configure the OL 9 to enforce a delay of at least four seconds between logon prompts following a failed console logon attempt.Modify the "/etc/login.defs" file to set the "FAIL_DELAY" parameter to 4 or greater:
FAIL_DELAY 4
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_9_V1R5_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 9 STIG v1r5
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-271850r1092262_rule, STIG-ID|OL09-00-003070, Vuln-ID|V-271850
Plugin: Unix
Control ID: a28986ccf061cd7962ac0546aebec311ae1c50c92f81687f3a8cf63c064654a0