STIGQter: STIG Summary: Oracle Linux 5 Security Technical Implementation Guide Version: 1 Release: 13 Benchmark Date: 26 Oct 2018: User passwords must be changed at least every 60 days.DISA Rule
SV-64083r1_rule
Vulnerability Number
V-11976
Group Title
GEN000700
Rule Version
GEN000700
Severity
CAT II
CCI(s)
- CCI-000180 - The organization manages information system authenticators by establishing maximum lifetime restrictions for authenticators.
Weight
10
Fix Recommendation
Set the max days field to 60 for all user accounts.
# passwd -x 60 <user>
Check Contents
Check the max days field (the 5th field) of /etc/shadow.
# more /etc/shadow
If the max days field is equal to 0 or greater than 60 for any user, this is a finding.
Vulnerability Number
V-11976
Documentable
False
Rule Version
GEN000700
Severity Override Guidance
Check the max days field (the 5th field) of /etc/shadow.
# more /etc/shadow
If the max days field is equal to 0 or greater than 60 for any user, this is a finding.
Check Content Reference
M
Responsibility
System Administrator
Target Key
2207
Comments