Ensure logindelay is configured

SrednjaNivo 1Automatskaaix

Opis

Defines the number of seconds delay between each failed login attempt. This works as a multiplier, so if the parameter is set to 10, after the first failed login it would delay for 10 seconds, after the second failed login 20 seconds etc. In setting the logindelay attribute, this implements a delay multiplier in-between unsuccessful login attempts. Audit: reads `lssec -f /etc/security/login.cfg -s default -a logindelay`.

Kako se proverava

Metod provere: Komanda ljuske

shell

command -v lssec >/dev/null 2>&1 || exit 1; out=$(lssec -f /etc/security/login.cfg -s default -a logindelay 2>/dev/null) || exit 1; v=$(printf '%s\n' "$out" | sed -n 's/.*logindelay=\([^ ]*\).*/\1/p'); if [ -n "$v" ] && [ "$v" -ge 10 ]; then echo compliant; else echo "logindelay=$v"; fi

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Komanda ljuske

shell

chsec -f /etc/security/login.cfg -s default -a logindelay=10

Svojstva

Operativni sistemi: Bilo koji
Oznake: aixaccounts
Referenca: CIS IBM AIX 7 Benchmark v1.2.0 - 4.7.2 Ensure logindelay is configured

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target aix