SLEM-05-412025 - SLEM 5 must enforce a delay of at least five seconds between logon prompts following a failed logon attempt via pluggable authentication modules (PAM).

Information

Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.

Solution

Configure SLEM 5 to enforce a delay of at least five seconds between logon prompts following a failed logon attempt.

Add or modify the following line in the "/etc/pam.d/common-auth" file:

auth required pam_faildelay.so delay=5000000

Item Details

Audit Name: DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4

Category: CONFIGURATION MANAGEMENT

Plugin: Unix

Control ID: 670d8017452d40447b4fd6354c0b72cbdb97528e7defcfdb988d24a5cb0d90de

Detections

Analytics

SLEM-05-412025 - SLEM 5 must enforce a delay of at least five seconds between logon prompts following a failed logon attempt via pluggable authentication modules (PAM).

Information

Solution

See Also

Item Details