[LINUX] 리눅스 계정 잠금 임계 값 설정

5회 실패시 10분 계정 잠금

 

$ vi /etc/pam.d/system-auth
# /etc/pam.d/system-auth
auth        required      pam_env.so
auth        required      pam_tally2.so deny=5 unlock_time=600 # 추가 
auth        required      pam_faildelay.so delay=2000000
auth        sufficient    pam_fprintd.so
auth        sufficient    pam_unix.so nullok try_first_pass

account     required      pam_unix.so
account     required      pam_tally2.so # 추가 
account     sufficient    pam_localuser.so
# /etc/pam.d/password-auth
auth        required      pam_env.so
auth        required      pam_tally2.so deny=5 unlock_time=600 # 추가 
auth        required      pam_faildelay.so delay=2000000
auth        sufficient    pam_fprintd.so
auth        sufficient    pam_unix.so nullok try_first_pass

account     required      pam_unix.so
account     required      pam_tally2.so # 추가 
account     sufficient    pam_localuser.so