UBTU-18-010033 - The Ubuntu operating system must be configured so that three consecutive invalid logon attempts by a user automatically locks the account until released by an administrator.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

Information

By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-force attacks, is reduced. Limits are imposed by locking the account.
Satisfies: SRG-OS-000329-GPOS-00128

Solution

Configure the Ubuntu operating system to lock an account after three unsuccessful login attempts.

Edit the /etc/pam.d/common-auth file. The pam_tally2.so entry must be placed at the top of the 'auth' stack. So add the following line before the first 'auth' entry in the file.

auth required pam_tally2.so onerr=fail deny=3

Item Details

Audit Name: DISA STIG Ubuntu 18.04 LTS v2r2

Category: ACCESS CONTROL

Plugin: Unix

Control ID: 104765ce77b946f2edd7ff5c58364ff357b23df506bda50584624447502aff83

Detections

Analytics

UBTU-18-010033 - The Ubuntu operating system must be configured so that three consecutive invalid logon attempts by a user automatically locks the account until released by an administrator.

Warning! Audit Deprecated

Information

Solution

See Also

Item Details