Detections
Analytics
SLES-15-040000 - The SUSE operating system must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.
Information
Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.Solution
Configure the SUSE operating system to enforce a delay of at least four seconds between logon prompts following a failed logon attempt.Add or update the following variable in "/etc/login.defs" to match the line below ("FAIL_DELAY" must have a value of "4" or higher):
FAIL_DELAY 4
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLES_15_V2R8_STIG.zip
Item Details
Audit Name: DISA SUSE Linux Enterprise Server 15 STIG v2r8
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-234982r991588_rule, STIG-ID|SLES-15-040000, Vuln-ID|V-234982
Plugin: Unix
Control ID: d39b0bf8ba087d149482a1b0545fd58ab2fc8e96f68766e4d48cc95749895249