GEN000480 - The delay between login prompts following a failed login attempt must be at least 4 seconds.

Information

Enforcing a delay between successive failed login attempts increases protection against automated password guessing attacks.

Solution

Edit the /etc/default/login file and set SLEEPTIME to 4.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip

Item Details

Audit Name: DISA STIG Solaris 10 SPARC v2r4

Category: ACCESS CONTROL

References: 800-53|AC-7b., CAT|II, CCI|CCI-002238, Rule-ID|SV-220022r854393_rule, STIG-ID|GEN000480, STIG-Legacy|SV-27094, STIG-Legacy|V-768, Vuln-ID|V-220022

Plugin: Unix

Control ID: 93f7507dde8f035bd7f3499cf14c87a3156278534401951c043cb1916e227313