UCF STIG Viewer Logo

The Photon operating system must set the FAIL_DELAY parameter.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239147 PHTN-67-000076 SV-239147r675249_rule Medium
Description
Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.
STIG Date
VMware vSphere 6.7 Photon OS Security Technical Implementation Guide 2022-06-17

Details

Check Text ( C-42358r675247_chk )
At the command line, execute the following command:

# grep FAIL_DELAY /etc/login.defs

Expected result:

FAIL_DELAY 4

If the output does not match the expected result, this is a finding.
Fix Text (F-42317r675248_fix)
Open /etc/login.defs with a text editor.

Add the following line after the last auth statement:

FAIL_DELAY 4