Ensure logindelay is configured

SedangLevel 1Otomatisaix

Deskripsi

Defines the number of seconds delay between each failed login attempt. This works as a multiplier, so if the parameter is set to 10, after the first failed login it would delay for 10 seconds, after the second failed login 20 seconds etc. In setting the logindelay attribute, this implements a delay multiplier in-between unsuccessful login attempts. Audit: reads `lssec -f /etc/security/login.cfg -s default -a logindelay`.

Cara pemeriksaan

Metode audit: Perintah shell

shell

command -v lssec >/dev/null 2>&1 || exit 1; out=$(lssec -f /etc/security/login.cfg -s default -a logindelay 2>/dev/null) || exit 1; v=$(printf '%s\n' "$out" | sed -n 's/.*logindelay=\([^ ]*\).*/\1/p'); if [ -n "$v" ] && [ "$v" -ge 10 ]; then echo compliant; else echo "logindelay=$v"; fi

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Perintah shell

shell

chsec -f /etc/security/login.cfg -s default -a logindelay=10

Properti

Sistem operasi: Apa saja
Tag: aixaccounts
Referensi: CIS IBM AIX 7 Benchmark v1.2.0 - 4.7.2 Ensure logindelay is configured

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target aix