RHEL-09-412050 - RHEL 9 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.

Information

Increasing the time between a failed authentication attempt and reprompting to enter credentials helps to slow a single-threaded brute force attack.

Solution

Configure the RHEL 9 to enforce a delay of at least four seconds between logon prompts following a failed console logon attempt.

Modify the "/etc/login.defs" file to set the "FAIL_DELAY" parameter to 4 or greater:

FAIL_DELAY 4

Item Details

Audit Name: DISA Red Hat Enterprise Linux 9 STIG v2r8

Category: CONFIGURATION MANAGEMENT

Plugin: Unix

Control ID: d6b60610f4fdf3d9957190bd4fe65441e18a2640fd69e85300b133016b44d38e

Detections

Analytics

RHEL-09-412050 - RHEL 9 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.

Information

Solution

See Also

Item Details