The delay between login prompts following a failed login attempt must be at least 4 seconds.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-768	GEN000480	SV-38446r1_rule	ECLO-1 ECLO-2	Medium

Description
Enforcing a delay between consecutive failed login attempts increases protection against automated password guessing attacks.

STIG	Date
HP-UX 11.31 Security Technical Implementation Guide	2013-06-27

Details

Check Text ( C-36250r1_chk )
Check the t_logdelay setting. # more /tcb/files/auth/system/default Verify the value of the t_logdelay variable. If the value is less than 4, this is a finding.

Fix Text (F-31507r1_fix)
SMH is installed with defaults. Modify the env variables and tag values using the HP-SMH. Locate and set to 4 for the login delay.