AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE

The AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE (V1 R14) has 506 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

506STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R14

CurrentPublished Fri Oct 26 2018

Users must not be able to change passwords more than once every 24 hours.

AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE

Assessment Title

Rule Text

Users must not be able to change passwords more than once every 24 hours.

Description

Discussion Text

The ability to change passwords frequently facilitates users reusing the same password. This can result in users effectively never changing their passwords. This would be accomplished by users changing their passwords when required and then immediately changing it to the original value.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-1032

Rule

SV-38768r1_rule

Severity

medium

Rule Version

GEN000540

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the minage field for each user.
# /usr/sbin/lsuser -a minage ALL

If the minage field is less than 1 for any user, this is a finding.

Implementation Procedure

Fix Text

Use SMIT or the chsec command to set the minimum password age to 1 week.

# chsec -f /etc/security/user -s default -a minage=1 
# chsec -f /etc/security/user -s <user id> -a minage=1

OR

# smitty chuser

STIG check 10 of 506 in the AIX 6.1 STIG checklist

← Previous · V-1030The smb.conf file must use the hosts option to restrict access to Samba.Next · V-1046 →Root passwords must never be passed over a network in clear text form.