Oracle Linux Hardening Configuration

Hi Team,

Good day!

I would like your to help to check on the below parameter is correct or not?

Base on this just only a normal users puts the wrong password the user account will block, then need to manually unlock.

---------------------------------------------------------------------------------------------------------------

# /etc/pam.d/password-auth

auth required pam_faillock.so preauth silent audit deny=5 unlock_time=never

auth [default=die] pam_faillock.so authfail audit deny=5 unlock_time=never

account required pam_faillock.so

# /etc/pam.d/system-auth

auth required pam_faillock.so preauth silent audit deny=5 unlock_time=never

auth [default=die] pam_faillock.so authfail audit deny=5 unlock_time=never