The Photon operating system must enforce a delay of at least four seconds between logon prompts following a failed logon attempt in login.defs.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-258854	PHTN-40-000185	SV-258854r933623_rule		Medium

Description
Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.

STIG	Date
VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide	2023-10-29

Details

Check Text ( C-62594r933621_chk )
At the command line, run the following command to verify a four second delay is configured between logon attempts: # grep '^FAIL_DELAY' /etc/login.defs Example result: FAIL_DELAY 4 If the "FAIL_DELAY" option is not set to 4 or more, is missing or commented out, this is a finding.

Fix Text (F-62503r933622_fix)
Navigate to and open: /etc/login.defs Add or update the following line: FAIL_DELAY 4