Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-01 14:34:18 -04:00
Code Issues Projects Releases Packages Wiki Activity

Lock user accounts after 50 rather than 100 failed login attempts.

Browse source 
https://forums.whonix.org/t/how-strong-do-linux-user-account-passwords-have-to-be-when-using-full-disk-encryption-fde-too/7698/19
This commit is contained in:
Patrick Schleizer 2019-11-25 01:39:53 -05:00
parent 6277db1383
commit aa5451c8cd
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
3 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
usr/share/pam-configs/tally2-security-misc
View file

@ -1,10 +1,10 @@
Name: lock accounts after 100 failed authentication attempts (by package security-misc)
Name: lock accounts after 50 failed authentication attempts (by package security-misc)
Default: yes
Priority: 260
Auth-Type: Primary
Auth:
optional pam_exec.so debug stdout seteuid /usr/lib/security-misc/pam_tally2-info
requisite pam_tally2.so even_deny_root deny=100 onerr=fail audit debug
requisite pam_tally2.so even_deny_root deny=50 onerr=fail audit debug
Account-Type: Primary
Account:
requisite pam_tally2.so debug