Detections
Analytics

1.400 RHEL-10-701290

Information

RHEL 10 must prohibit the use of cached authenticators after one day.

GROUP ID: V-281331
RULE ID: SV-281331r1167143

If cached authentication information is out of date, the validity of the authentication information may be questionable.

Solution

Configure RHEL 10 SSSD to prohibit the use of cached authentications after one day.

Edit the file "/etc/sssd/sssd.conf" or a configuration file in "/etc/sssd/conf.d" and add or edit the following line just below the line [pam]:

offline_credentials_expiration = 1

Restart the "sssd" service with the following command for the changes to take effect:

$ sudo systemctl restart sssd.service

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(13), CAT|II, CCI|CCI-002007, Rule-ID|SV-281331r1167143_rule, STIG-ID|RHEL-10-701290, Vuln-ID|V-281331

Plugin: Unix

Control ID: a6939481eb13146414277fadbcaf269b66c42548e32f72937df2db7fb30ee999