Revision 1.2

Apr 12, 2023
Functional Update
  • SLES-12-010140 - The SUSE operating system must enforce a delay of at least four (4) seconds between logon prompts following a failed logon attempt.
  • SLES-12-010210 - The SUSE operating system must employ FIPS 140-2 approved cryptographic hashing algorithm for system authentication (login.defs).
  • SLES-12-010240 - The SUSE operating system must employ FIPS 140-2-approved cryptographic hashing algorithms for all stored passwords - SHA_CRYPT_MIN_ROUNDS
  • SLES-12-010260 - The SUSE operating system must be configured to create or update passwords with a minimum lifetime of 24 hours (one day) - 1 day.
  • SLES-12-010280 - The SUSE operating system must be configured to create or update passwords with a maximum lifetime of 60 days.
  • SLES-12-010620 - The SUSE operating system default permissions must be defined in such a way that all authenticated users can only read and modify their own files.
Miscellaneous
  • Metadata updated.
  • Platform check updated.
  • Variables updated.