STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 must automatically expire temporary accounts within 72 hours.

DISA Rule

SV-261355r996516_rule

Vulnerability Number

V-261355

Group Title

SRG-OS-000123-GPOS-00064

Rule Version

SLEM-05-411045

Severity

CAT II

CCI(s)

• CCI-001682 - Automatically removes or disables emergency accounts after an organization-defined time period for each type of account.
• CCI-000016 - Automatically remove or disable temporary and emergency accounts after an organization-defined time-period for each type of account.

Weight

10

Fix Recommendation

Configure SLEM 5 to expire temporary accounts after 72 hours with the following command:

>sudo chage -E $(date -d +3days +%Y-%m-%d) <temporary_account_name>

Check Contents

Verify temporary accounts have been provisioned with an expiration date of 72 hours with the following command:

> sudo chage -l <temporary_account_name> | grep -E '(Password|Account) expires'

If any temporary accounts have no expiration date set or do not expire within 72 hours, this is a finding.

Vulnerability Number

V-261355

Documentable

False

Rule Version

SLEM-05-411045

Severity Override Guidance

Verify temporary accounts have been provisioned with an expiration date of 72 hours with the following command:

> sudo chage -l <temporary_account_name> | grep -E '(Password|Account) expires'

If any temporary accounts have no expiration date set or do not expire within 72 hours, this is a finding.

Check Content Reference

M

Target Key

5596