Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Accounts must be locked upon 35 days of inactivity.
Description
Discussion Text
On some systems, accounts with disabled passwords still allow access using rcp, remsh, or rlogin through equivalent remote hosts. All that is required is the remote host name and the user name match an entry in a hosts.equiv file and have a .rhosts file in the user directory. Using a shell called /bin/false or /dev/null (or an equivalent) will add a layered defense.
Non-interactive accounts on the system, such as application accounts, may be documented exceptions.
Non-interactive accounts on the system, such as application accounts, may be documented exceptions.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.