← Back to Nutanix AOS 5.20.x OS Security Technical Implementation Guide

V-254193

CAT II (Medium)

Nutanix AOS must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.

Rule ID

SV-254193r991588_rule

STIG

Nutanix AOS 5.20.x OS Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000366

Discussion

Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.

Check Content

Confirm Nutanix AOS enforces a delay of at least four seconds between console logon prompts following a failed logon attempt.

$ sudo grep -i fail_delay /etc/login.defs
FAIL_DELAY 4

If the value of "FAIL_DELAY" is not set to "4" or greater, or the line is commented out, this is a finding.

Fix Text

Configure Nutanix AOS to enforce a delay between logon prompts following a failed logon attempt by running the following command:

$ sudo salt-call state.sls security/CVM/pamCVM