An XCCDF Rule
pam_faillock.so
/etc/security/faillock.conf
unlock_time=<interval-in-seconds>
interval-in-seconds
authselect
authconfig
unlock_time
0
faillock