Detections
Analytics
GEN000460 - The system must disable accounts after three consecutive unsuccessful login attempts - LOCK_AFTER_RETRIES
Information
Disabling accounts after a limited number of unsuccessful login attempts improves protection against password guessing attacks.Solution
Set RETRIES to 3 in the /etc/default/login file.#vi /etc/default/login
Set LOCK_AFTER_RETRIES to YES in the /etc/security/policy.conf file.
#vi /etc/security/policy.conf
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip
Item Details
Audit Name: DISA STIG Solaris 10 X86 v2r4
Category: ACCESS CONTROL
References: 800-53|AC-7a., CAT|II, CCI|CCI-000044, Rule-ID|SV-220074r603266_rule, STIG-ID|GEN000460, STIG-Legacy|SV-39815, STIG-Legacy|V-766, Vuln-ID|V-220074
Plugin: Unix
Control ID: 5c82e150eab67bf8bc35cab7c9567b34bcefd4ae10f513fc1fcb8731c9e0e980