This question already has an answer here:
I'm about to start my new job as a sysadmin and I've been thinking about implementing a cooldown feature on
sudo. The cooldown prevents the user from using these commands for a few seconds after the first failed attempt, and the waiting time increases with each failed attempt by some factor.
The idea behind the concept is that the authorized user might get it wrong the first time but will get it right on the second. The cooldown will be there to discourage and delay an adversary from using brute-force variations.
Is there a flaw in my approach? Would replacing the sudo command with a modified script be wise? Or should I patch the executable itself?
Edit: I've already searched for this on Google, nothing found. Same goes for SO, SuperUser.SE and Security.SE. If you feel this question isn't a fit for ServerFault, please flag it so.