SV-261394r996604_rule
V-261394
SRG-OS-000075-GPOS-00043
SLEM-05-611095
CAT II
10
Configure SLEM 5 to enforce 24 hours/one day or greater as the minimum password age.
Add or modify the following line in the "/etc/login.defs" file:
PASS_MIN_DAYS <days>
The DOD requirement is "1", but a greater value is acceptable.
Verify SLEM 5 creates or updates passwords with minimum password age of one day or greater with the following command:
> grep '^PASS_MIN_DAYS' /etc/login.defs
PASS_MIN_DAYS 1
If "PASS_MIN_DAYS" does not have a value of "1" or greater, the line is commented out, or no line is returned, this is a finding.
V-261394
False
SLEM-05-611095
Verify SLEM 5 creates or updates passwords with minimum password age of one day or greater with the following command:
> grep '^PASS_MIN_DAYS' /etc/login.defs
PASS_MIN_DAYS 1
If "PASS_MIN_DAYS" does not have a value of "1" or greater, the line is commented out, or no line is returned, this is a finding.
M
5596