SV-261388r1184422_rule
V-261388
SRG-OS-000075-GPOS-00043
SLEM-05-611065
CAT II
10
Configure SLEM 5 to enforce 24 hours/one day or greater as the minimum password age for user accounts.
Change the minimum time period between password changes for each <username> account to "1" day with the command, replacing <username> with the user account that must be changed:
> sudo passwd -n 1 <username>
Verify SLEM 5 enforces a minimum time period between password changes for each user account of one day or greater with the following command:
> sudo awk -F: '$4 < 1 {print $1 ":" $4}' /etc/shadow
dosuser:1
If any results are returned that are not associated with a system account, this is a finding.
V-261388
False
SLEM-05-611065
Verify SLEM 5 enforces a minimum time period between password changes for each user account of one day or greater with the following command:
> sudo awk -F: '$4 < 1 {print $1 ":" $4}' /etc/shadow
dosuser:1
If any results are returned that are not associated with a system account, this is a finding.
M
5596