STIGQter STIGQter: STIG Summary: Solaris 10 SPARC Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

User passwords must be changed at least every 60 days.

DISA Rule

SV-226465r603265_rule

Vulnerability Number

V-226465

Group Title

SRG-OS-000076

Rule Version

GEN000700

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Set the max days field to 60 for all user accounts.
# passwd -x 60 <user>
Set the MAXWEEKS parameter in /etc/default/passwd to a positive, non-zero value of 8 or less.

Check Contents

Check the max days field (the 5th field) of /etc/shadow.
# awk -F: '{print $1 ":" $5;}' /etc/shadow
If the max days field is equal to 0 or greater than 60 for any account that is not password-locked, this is a finding.

Vulnerability Number

V-226465

Documentable

False

Rule Version

GEN000700

Severity Override Guidance

Check the max days field (the 5th field) of /etc/shadow.
# awk -F: '{print $1 ":" $5;}' /etc/shadow
If the max days field is equal to 0 or greater than 60 for any account that is not password-locked, this is a finding.

Check Content Reference

M

Target Key

4060

Comments