Detections
Analytics

1.181 OL08-00-020210

Information

OL 8 user account passwords must be configured so that existing passwords are restricted to a 60-day maximum lifetime.

GROUP ID: V-248697RULE ID: SV-248697r1038967

Any password, no matter how complex, can eventually be cracked. Therefore, passwords need to be changed periodically. If OL 8 does not limit the lifetime of passwords and force users to change their passwords, there is the risk that OL 8 passwords could be compromised.

Solution

Configure non-compliant accounts to enforce a 60-day maximum password lifetime restriction.

$ sudo chage -M 60 [user]

See Also

https://workbench.cisecurity.org/benchmarks/23791

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|II, CCI|CCI-000199, CCI|CCI-004066, Rule-ID|SV-248697r1038967_rule, STIG-ID|OL08-00-020210, Vuln-ID|V-248697

Plugin: Unix

Control ID: 116cc94c0b01889155480ab65ae355b27998dc34ac478320414fd0375ba0ec0c