STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 must never automatically remove or disable emergency administrator accounts.

DISA Rule

SV-261356r996518_rule

Vulnerability Number

V-261356

Group Title

SRG-OS-000123-GPOS-00064

Rule Version

SLEM-05-411050

Severity

CAT II

CCI(s)

• CCI-001682 - Automatically removes or disables emergency accounts after an organization-defined time period for each type of account.

Weight

10

Fix Recommendation

Configure SLEM 5 to never automatically remove or disable emergency administrator accounts.

> sudo chage -I -1 -M 99999 <emergency_administrator_account_name>

Check Contents

Verify SLEM 5 is configured such that emergency administrator accounts are never automatically removed or disabled with the following command:

Note: Root is typically the "account of last resort" on a system and is also used as the example emergency administrator account. If another account is being used as the emergency administrator account, the command should be used against that account.

> sudo chage -l <emergency_administrator_account_name> | grep -E '(Password|Account) expires'
Password expires: never
Account expires: never

If "Password expires" or "Account expires" is set to anything other than "never", this is a finding.

Vulnerability Number

V-261356

Documentable

False

Rule Version

SLEM-05-411050

Severity Override Guidance

Verify SLEM 5 is configured such that emergency administrator accounts are never automatically removed or disabled with the following command:

Note: Root is typically the "account of last resort" on a system and is also used as the example emergency administrator account. If another account is being used as the emergency administrator account, the command should be used against that account.

> sudo chage -l <emergency_administrator_account_name> | grep -E '(Password|Account) expires'
Password expires: never
Account expires: never

If "Password expires" or "Account expires" is set to anything other than "never", this is a finding.

Check Content Reference

M

Target Key

5596