STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 must employ FIPS 140-2/140-3-approved cryptographic hashing algorithms for system authentication.

DISA Rule

SV-261391r996598_rule

Vulnerability Number

V-261391

Group Title

SRG-OS-000073-GPOS-00041

Rule Version

SLEM-05-611080

Severity

CAT I

CCI(s)

CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Weight

Fix Recommendation

Configure SLEM 5 to encrypt all stored passwords with FIPS 140-2/140-3-approved cryptographic hash.

Add or modify the following line in the "/etc/login.defs" file:

ENCRYPT_METHOD SHA512

Lock all interactive user accounts not using SHA512 hashing until the passwords can be regenerated.

Check Contents

Verify SLEM 5 shadow password suite is configured to encrypt interactive user passwords using FIPS 140-2/140-3-approved cryptographic hash with the following command:

> sudo cut -d: -f2 /etc/shadow
$6$kcOnRq/5$NUEYPuyL.wghQwWssXRcLRFiiru7f5JPV6GaJhNC2aK5F3PZpE/BCCtwrxRc/AInKMNX3CdMw11m9STiql12f/

Password hashes "!" or "*" indicate inactive accounts not available for logon and are not evaluated.

If any interactive user password hash does not begin with "$6", this is a finding.

Vulnerability Number

V-261391

Documentable

False

Rule Version

SLEM-05-611080

Severity Override Guidance

Check Content Reference

Target Key

5596