STIGQter: STIG Summary: Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

Ubuntu 22.04 LTS must implement multifactor authentication for remote access to privileged accounts in such a way that one of the factors is provided by a device separate from the system gaining access.

DISA Rule

SV-260573r1015019_rule

Vulnerability Number

V-260573

Group Title

SRG-OS-000375-GPOS-00160

Rule Version

UBTU-22-612010

Severity

CAT II

CCI(s)

CCI-000765 - Implement multifactor authentication for network access to privileged accounts.
CCI-000766 - Implement multifactor authentication for network access to non-privileged accounts.
CCI-004046 - Implement multi-factor authentication for local; network; and/or remote access to privileged accounts; and/or non-privileged accounts such that one of the factors is provided by a device separate from the system gaining access.
CCI-004047 - Implement multi-factor authentication for local; network; and/or remote access to privileged accounts; and/or non-privileged accounts such that the device meets organization-defined strength of mechanism requirements.

Weight

Fix Recommendation

Install the "libpam-pkcs11" package by using the following command:

$ sudo apt-get install libpam-pkcs11

Check Contents

Verify Ubuntu 22.04 LTS has the packages required for multifactor authentication installed by using the following command:

$ dpkg -l | grep libpam-pkcs11
ii libpam-pkcs11 0.6.11-4build2 amd64 Fully featured PAM module for using PKCS#11 smart cards

If the "libpam-pkcs11" package is not installed, this is a finding.

Vulnerability Number

V-260573

Documentable

False

Rule Version

UBTU-22-612010

Severity Override Guidance

Check Content Reference

Target Key

5594