STIGQter STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 must disable account identifiers (individuals, groups, roles, and devices) after 35 days of inactivity after password expiration.

DISA Rule

SV-261360r996529_rule

Vulnerability Number

V-261360

Group Title

SRG-OS-000118-GPOS-00060

Rule Version

SLEM-05-411070

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure SLEM 5 to disable account identifiers after 35 days of inactivity after the password expiration.

Run the following command to change the configuration for "useradd" to disable the account identifier after "35" days:

> sudo useradd -D -f 35

DOD recommendation is "35" days, but a lower value greater than "0" is acceptable.

Check Contents

Verify SLEM 5 disables account identifiers after 35 days of inactivity after the password expiration with the following command:

> sudo grep -i '^inactive' /etc/default/useradd
INACTIVE=35

If the value for "INACTIVE" is not set to a value greater than "0" and less than or equal to "35", if the line is commented out, or the line is missing, this is a finding.

Vulnerability Number

V-261360

Documentable

False

Rule Version

SLEM-05-411070

Severity Override Guidance

Verify SLEM 5 disables account identifiers after 35 days of inactivity after the password expiration with the following command:

> sudo grep -i '^inactive' /etc/default/useradd
INACTIVE=35

If the value for "INACTIVE" is not set to a value greater than "0" and less than or equal to "35", if the line is commented out, or the line is missing, this is a finding.

Check Content Reference

M

Target Key

5596