STIGQter: STIG Summary: Solaris 10 SPARC Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

All non-interactive/automated processing account passwords must be changed at least once per year or be locked.

DISA Rule

SV-226466r603265_rule

Vulnerability Number

V-226466

Group Title

SRG-OS-000076

Rule Version

GEN000740

Severity

CAT II

CCI(s)

• CCI-000199 - The information system enforces maximum password lifetime restrictions.

Weight

10

Fix Recommendation

Implement or establish procedures to change the passwords of automated processing accounts at least once per year.

Check Contents

Ask the SA if there are any automated processing accounts on the system. If there are automated processing accounts on the system, ask the SA if the passwords for those automated accounts are changed at least once a year. If SA indicates passwords for automated processing accounts are not changed once per year, this is a finding.

Vulnerability Number

V-226466

Documentable

False

Rule Version

GEN000740

Severity Override Guidance

Ask the SA if there are any automated processing accounts on the system. If there are automated processing accounts on the system, ask the SA if the passwords for those automated accounts are changed at least once a year. If SA indicates passwords for automated processing accounts are not changed once per year, this is a finding.

Check Content Reference

M

Target Key

4060

Comments