Skip to content
Log In

SRG-OS-000021-GPOS-00005

The operating system must enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.

Account Lockouts Must Be Logged

31 rules found Severity: Medium

Logo

Lock Accounts After Failed Password Attempts

21 rules found Severity: Medium

Logo

Configure the root Account for Failed Password Attempts

15 rules found Severity: Medium

Logo

Set Interval For Counting Failed Password Attempts

18 rules found Severity: Medium

Logo

Set Lockout Time for Failed Password Attempts

21 rules found Severity: Medium

Logo

Configure the Use of the pam_faillock.so Module in the /etc/pam.d/password-auth File.

9 rules found Severity: Medium

Logo

Configure the Use of the pam_faillock.so Module in the /etc/pam.d/system-auth File.

9 rules found Severity: Medium

Logo

An SELinux Context must be configured for the pam_faillock.so records directory

9 rules found Severity: Medium

Logo

Lock Accounts Must Persist

9 rules found Severity: Medium

Logo

Do Not Show System Messages When Unsuccessful Logon Attempts Occur

7 rules found Severity: Medium

Logo

Set Deny For Failed Password Attempts

4 rules found Severity: Medium

Logo

Configure the root Account lock for Failed Password Attempts via pam_tally2

2 rules found Severity: Medium

Logo

Set Lockout Time for Failed Password Attempts using pam_tally2

2 rules found Severity: Medium

Logo

SLEM 5 must use the default pam_tally2 tally directory.

1 rule found Severity: Medium

Logo

An SELinux Context must be configured for default pam_tally2 file option

1 rule found Severity: Medium

Logo