STIGQter: STIG Summary: Anduril NixOS Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Oct 2025:

NixOS emergency or temporary user accounts must be provisioned with an expiration time of 72 hours or less.

DISA Rule

SV-268079r1130948_rule

Vulnerability Number

V-268079

Group Title

SRG-OS-000002-GPOS-00002

Rule Version

ANIX-00-000020

Severity

CAT II

CCI(s)

• CCI-000016 - Automatically remove or disable temporary and emergency accounts after an organization-defined time-period for each type of account.
• CCI-001682 - Automatically removes or disables emergency accounts after an organization-defined time period for each type of account.

Weight

10

Fix Recommendation

Configure the system to terminate emergency or temporary accounts after a 72-hour time period with the following command. Substitute "system_account_name" with the account to be created.

$ sudo chage -E "date -d "+3 days" +%Y-%m-%d" system_account_name

Check Contents

Verify that emergency or temporary accounts have been provisioned with an expiration date of 72 hours.

For every existing emergency or temporary account, run the following command to obtain its account expiration information.

$ sudo chage -l system_account_name

If any emergency or temporary accounts have no expiration date set or do not expire within 72 hours, this is a finding.

Vulnerability Number

V-268079

Documentable

False

Rule Version

ANIX-00-000020

Severity Override Guidance

Verify that emergency or temporary accounts have been provisioned with an expiration date of 72 hours.

For every existing emergency or temporary account, run the following command to obtain its account expiration information.

$ sudo chage -l system_account_name

If any emergency or temporary accounts have no expiration date set or do not expire within 72 hours, this is a finding.

Check Content Reference

M

Target Key

5658