An XCCDF Rule
pam_faillock.so
fail_interval
/etc/pam.d/password-auth
/etc/pam.d/system-auth
fail_interval=<interval-in-seconds>
interval-in-seconds
authselect
authconfig