Ensure logindelay is configured

MediumLevel 1Automatedaix

Description

Defines the number of seconds delay between each failed login attempt. This works as a multiplier, so if the parameter is set to 10, after the first failed login it would delay for 10 seconds, after the second failed login 20 seconds etc. In setting the logindelay attribute, this implements a delay multiplier in-between unsuccessful login attempts. Audit: reads `lssec -f /etc/security/login.cfg -s default -a logindelay`.

How it is checked

Audit method: Shell command

shell

command -v lssec >/dev/null 2>&1 || exit 1; out=$(lssec -f /etc/security/login.cfg -s default -a logindelay 2>/dev/null) || exit 1; v=$(printf '%s\n' "$out" | sed -n 's/.*logindelay=\([^ ]*\).*/\1/p'); if [ -n "$v" ] && [ "$v" -ge 10 ]; then echo compliant; else echo "logindelay=$v"; fi

Expected output: compliant

How it is fixed

Fix method: Shell command

shell

chsec -f /etc/security/login.cfg -s default -a logindelay=10

Properties

Operating systems: Any
Tags: aixaccounts
Reference: CIS IBM AIX 7 Benchmark v1.2.0 - 4.7.2 Ensure logindelay is configured

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target aix