commoncriteria/virtualization

5.1.5 FIA_AFL_EXT.1.2

Closed this issue · 1 comments

Change the application note to state, "This requirement applies to a defined number of unsuccessful remote authentication attempts and does not apply to local Administrative access".

Again, this change disallows administrators from bypassing the lockout by remotely logging in using some other remote login method specified by FIA_UAU.5.1.

Effectively done.