STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 must employ FIPS 140-2/140-3 approved cryptographic hashing algorithm for system authentication (login.defs).

DISA Rule

SV-261393r996602_rule

Vulnerability Number

V-261393

Group Title

SRG-OS-000120-GPOS-00061

Rule Version

SLEM-05-611090

Severity

CAT II

CCI(s)

• CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Weight

10

Fix Recommendation

Configure SLEM 5 to require "ENCRYPT_METHOD" of "SHA512".

Add or modify the following line in the "/etc/login.defs" file:

ENCRYPT_METHOD SHA512

Check Contents

Verify that the shadow password suite configuration is set to encrypt password with a FIPS 140-2/140-3 approved cryptographic hashing algorithm with the following command:

> grep "^ENCRYPT_METHOD " /etc/login.defs
ENCRYPT_METHOD SHA512

If "ENCRYPT_METHOD" is not set to "SHA512", if any values other that "SHA512" are configured, or if no output is produced, this is a finding.

Vulnerability Number

V-261393

Documentable

False

Rule Version

SLEM-05-611090

Severity Override Guidance

Verify that the shadow password suite configuration is set to encrypt password with a FIPS 140-2/140-3 approved cryptographic hashing algorithm with the following command:

> grep "^ENCRYPT_METHOD " /etc/login.defs
ENCRYPT_METHOD SHA512

If "ENCRYPT_METHOD" is not set to "SHA512", if any values other that "SHA512" are configured, or if no output is produced, this is a finding.

Check Content Reference

M

Target Key

5596