Implement rule 5.3.3.1.2 Ensure password unlock time is configured

ComplianceAsCode · Jan 2, 2025 · 7e54d8e · 7e54d8e
1 parent 9c56df9
commit 7e54d8e
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/controls/cis_ubuntu2404.yml b/controls/cis_ubuntu2404.yml
@@ -1904,8 +1904,10 @@ controls:
     levels:
       - l1_server
       - l1_workstation
-    status: planned
-    notes: TODO. Rule does not seem to be implemented, nor does it map to any rules in ubuntu2204 profile.
+    status: automated
+    rules:
+      - var_accounts_passwords_pam_faillock_unlock_time=600
+      - accounts_passwords_pam_faillock_unlock_time
 
   - id: 5.3.3.1.3
     title: Ensure password failed attempts lockout includes root account (Automated)