Detections
Analytics

5.2.8 Password History

Information

Old passwords should not be reused

Solution

Perform the following to implement the prescribed state for all pwpolicy controls
1. Run the following command in Terminal:
pwpolicy -setaccountpolicies
Examples in pwpolicy man page and in the back of the Benchmark

See Also

https://workbench.cisecurity.org/files/300

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1)(d)

Plugin: Unix

Control ID: 6e3f55f4171584d243197677ae42e0ccb01e76b3019e76ed6db5615be02326f0