STIGQter STIGQter: STIG Summary: Oracle Linux 6 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

Users must not be able to change passwords more than once every 24 hours.

DISA Rule

SV-208827r603263_rule

Vulnerability Number

V-208827

Group Title

SRG-OS-000075

Rule Version

OL6-00-000051

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

To specify password minimum age for new accounts, edit the file "/etc/login.defs" and add or correct the following line, replacing [DAYS] appropriately:

PASS_MIN_DAYS [DAYS]

A value of 1 day is considered sufficient for many environments. The DoD requirement is 1.

Check Contents

To check the minimum password age, run the command:

$ grep PASS_MIN_DAYS /etc/login.defs

The DoD requirement is 1.
If it is not set to the required value, this is a finding.

Vulnerability Number

V-208827

Documentable

False

Rule Version

OL6-00-000051

Severity Override Guidance

To check the minimum password age, run the command:

$ grep PASS_MIN_DAYS /etc/login.defs

The DoD requirement is 1.
If it is not set to the required value, this is a finding.

Check Content Reference

M

Target Key

2928

Comments