The system must disable accounts after three consecutive unsuccessful login attempts.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-220074	GEN000460	SV-220074r603266_rule		Medium

Description
Disabling accounts after a limited number of unsuccessful login attempts improves protection against password guessing attacks.

STIG	Date
Solaris 10 X86 Security Technical Implementation Guide	2020-12-04

Details

Check Text ( C-21783r488276_chk )
Verify RETRIES is set in the login file. # grep RETRIES /etc/default/login If RETRIES is not set or is more than 3, this is a finding. Verify the account locks after invalid login attempts. # grep LOCK_AFTER_RETRIES /etc/security/policy.conf If LOCK_AFTER_RETRIES is not set to YES, this is a finding.

Fix Text (F-21782r488277_fix)
Set RETRIES to 3 in the /etc/default/login file. #vi /etc/default/login Set LOCK_AFTER_RETRIES to YES in the /etc/security/policy.conf file. #vi /etc/security/policy.conf