SV-261395r1038967_rule
V-261395
SRG-OS-000076-GPOS-00044
SLEM-05-611100
CAT II
10
Configure SLEM 5 to enforce a maximum password age of 60 days or less.
Add or modify the following line in the "/etc/login.defs" file:
PASS_MAX_DAYS <days>
The DOD requirement is 60 days or less (but greater than zero, as zero days will lock the account immediately).
Verify that SLEM 5 is configured to create or update passwords with a maximum password age of 60 days or less with the following command:
> grep '^PASS_MAX_DAYS' /etc/login.defs
If "PASS_MAX_DAYS" is not set to a value of "60" or less, but greater than "0", the line is commented out, or no line is returned, this is a finding.
V-261395
False
SLEM-05-611100
Verify that SLEM 5 is configured to create or update passwords with a maximum password age of 60 days or less with the following command:
> grep '^PASS_MAX_DAYS' /etc/login.defs
If "PASS_MAX_DAYS" is not set to a value of "60" or less, but greater than "0", the line is commented out, or no line is returned, this is a finding.
M
5596