Detections
Analytics

1.255 RHEL-10-600270

Information

RHEL 10 must enforce that passwords have a 24 hours/1 day minimum lifetime restriction in "/etc/shadow".

GROUP ID: V-281186RULE ID: SV-281186r1184622

Enforcing a minimum password lifetime helps to prevent repeated password changes to defeat the password reuse or history enforcement requirement. If users are allowed to immediately and continually change their password, the password could be repeatedly changed in a short period of time to defeat the organization's policy for password reuse.

Solution

Configure RHEL 10 so that noncompliant accounts enforce a 24 hours/1 day minimum password lifetime:

$ sudo passwd -n 1 [user]

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|II, CCI|CCI-004066, Rule-ID|SV-281186r1184622_rule, STIG-ID|RHEL-10-600270, Vuln-ID|V-281186

Plugin: Unix

Control ID: c59d752a29247db3fc67b5b28d846572435016ffb3ecc38c8a46aadf870c3536