STIGQter: STIG Summary: Oracle Linux 6 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes (libuser.conf).

DISA Rule

SV-208839r603263_rule

Vulnerability Number

V-208839

Group Title

SRG-OS-000120

Rule Version

OL6-00-000064

Severity

CAT II

CCI(s)

• CCI-000803 - The information system implements mechanisms for authentication to a cryptographic module that meet the requirements of applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Weight

10

Fix Recommendation

In "/etc/libuser.conf", add or correct the following line in its "[defaults]" section to ensure the system will use the SHA-512 algorithm for password hashing:

crypt_style = sha512

Check Contents

Inspect "/etc/libuser.conf" and ensure the following line appears in the "[default]" section:

crypt_style = sha512

If it does not, this is a finding.

Vulnerability Number

V-208839

Documentable

False

Rule Version

OL6-00-000064

Severity Override Guidance

Inspect "/etc/libuser.conf" and ensure the following line appears in the "[default]" section:

crypt_style = sha512

If it does not, this is a finding.

Check Content Reference

M

Target Key

2928

Comments