SLEM-05-411020 - SLEM 5 shadow password suite must be configured to enforce a delay of at least five seconds between logon prompts following a failed logon attempt.

Information

Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.

Solution

Configure SLEM 5 to enforce a delay of at least five seconds between logon prompts following a failed logon attempt.

Add or modify the following line in the "/etc/login.defs" file:

FAIL_DELAY 5

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLEM_5_V1R4_STIG.zip