Setting login restrictions on accounts

You can prevent unauthorized access to your system with login restrictions on accounts. Repeated unsuccessful login attempts are typically associated with trying to crack an account password.

You can increase the difficulty in cracking passwords with the following attributes in /etc/default/login:

DISABLETIME

interval between prompts after an unsuccessful login attempt

MAXTRYS

maximum number of login attempts permitted

TIMEOUT

maximum interval for a login attempt. When this period expires, the login is considered unsuccessful and the session is closed.

When a login session occurs over a modem connection, the consequence of aborting the session is that the modem disconnects.

See also:

• ``loginlog''