Detections
Analytics

1.197 OL09-00-001100

Information

OL 9 user account passwords must have a 60-day maximum password lifetime restriction.

GROUP ID: V-271632
RULE ID: SV-271632r1091608

Any password, no matter how complex, can eventually be cracked; therefore, passwords need to be changed periodically. If OL 9 does not limit the lifetime of passwords and force users to change their passwords, there is the risk that OL 9 passwords could be compromised.

Solution

Configure noncompliant accounts to enforce a 60-day maximum password lifetime restriction.

passwd -x 60 [user]

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CCI|CCI-004066, Rule-ID|SV-271632r1091608_rule, STIG-ID|OL09-00-001100, Vuln-ID|V-271632

Plugin: Unix

Control ID: 194c23ef8c1dabbed519f38272d46b027561e69f323fe7847bdbf173a183ac91