Insert fail delay for PAM modules

truenas · Feb 17, 2025 · 662ccee · 662ccee
1 parent 58672a8
commit 662ccee
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/middlewared/middlewared/etc_files/pam.d/common-auth.mako b/src/middlewared/middlewared/etc_files/pam.d/common-auth.mako
@@ -23,6 +23,9 @@
             raise TypeError(f'{dstype}: unknown DSType')
 %>\
 
+%if render_ctx['system.security.config']['enable_gpos_stig']:
+auth	optional	pam_faildelay.so	delay=4000000
+%endif
 % if conf.primary:
 ${'\n'.join(line.as_conf() for line in conf.primary)}
 % endif