STIGUI
V-256542CAT II — Medium severitySV-256542r991588_rule

The Photon operating system must set the "FAIL_DELAY" parameter.

Rule version PHTN-30-000072 · STIG v1 · 2026-08-31

Discussion

Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.

Check

At the command line, run the following command:

# grep FAIL_DELAY /etc/login.defs 

Expected result:

FAIL_DELAY 4

If the output does not match the expected result, this is a finding.

Fix

Navigate to and open:

/etc/login.defs

Add the following line after the last auth statement:

FAIL_DELAY 4

Identifiers

Group ID
V-256542
Group title
SRG-OS-000480-GPOS-00226
Rule ID
SV-256542r991588_rule
Check ID
C-60217r887298_chk
Fix ID
F-60160r887299_fix