STIGQter: STIG Summary: VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 31 Oct 2023:

The Photon operating system must automatically lock an account until the locked account is released by an administrator when three unsuccessful logon attempts in 15 minutes occur.

DISA Rule

SV-258843r933590_rule

Vulnerability Number

V-258843

Group Title

SRG-OS-000329-GPOS-00128

Rule Version

PHTN-40-000108

Severity

CAT II

CCI(s)

• CCI-002238 - Automatically lock the account or node for either an organization-defined time period, until the locked account or node is released by an administrator, or delays the next logon prompt according to the organization-defined delay algorithm when the maximum number of unsuccessful logon attempts is exceeded.

Weight

10

Fix Recommendation

Navigate to and open:

/etc/security/faillock.conf

Add or update the following lines:

unlock_time = 0

Note: On vCenter appliances, the equivalent file must be edited under "/etc/applmgmt/appliance", if one exists, for the changes to persist after a reboot.

Check Contents

At the command line, run the following commands to verify accounts are locked until the locked account is released by an administrator when three unsuccessful logon attempts in 15 minutes are made:

# grep '^unlock_time =' /etc/security/faillock.conf

Example result:

unlock_time = 0

If the "unlock_time" option is not set to "0", is missing or commented out, this is a finding.

Vulnerability Number

V-258843

Documentable

False

Rule Version

PHTN-40-000108

Severity Override Guidance

At the command line, run the following commands to verify accounts are locked until the locked account is released by an administrator when three unsuccessful logon attempts in 15 minutes are made:

# grep '^unlock_time =' /etc/security/faillock.conf

Example result:

unlock_time = 0

If the "unlock_time" option is not set to "0", is missing or commented out, this is a finding.

Check Content Reference

M

Target Key

5569