Detections
Analytics

1.69 AZLX-23-001305

Information

Amazon Linux 2023 must prohibit the use of cached authenticators after one day.

GROUP ID: V-274062RULE ID: SV-274062r1120174

If cached authentication information is out-of-date, the validity of the authentication information may be questionable.

Solution

Configure Amazon Linux 2023 SSSD service to prohibit the use of cached authentications after one day.

Add or change the following line in "/etc/sssd/sssd.conf" just below the line [pam]:

offline_credentials_expiration = 1

See Also

https://workbench.cisecurity.org/benchmarks/26107

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(13), CAT|II, CCI|CCI-002007, Rule-ID|SV-274062r1120174_rule, STIG-ID|AZLX-23-001305, Vuln-ID|V-274062

Plugin: Unix

Control ID: 5adac1fde034447a0d2c1ef4f56983e315e7b1aa664a5122a875b8b8ab5e4885