RHEL-06-000051 - Users must not be able to change passwords more than once every 24 hours.
RHEL-06-000053 - User passwords must be changed at least every 60 days.
RHEL-06-000054 - Users must be warned 7 days in advance of password expiration.
RHEL-06-000063 - The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes (login.defs) - login.defs.
RHEL-06-000345 - The system default umask in /etc/login.defs must be 077.
