HP-UX 11.23 Security Technical Implementation Guide

The HP-UX 11.23 Security Technical Implementation Guide (V1 R8) has 534 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

534STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R8

CurrentPublished Fri Jan 22 2016

The system must impose the same restrictions on root passwords that are already applied to non-root users.

HP-UX 11.23 Security Technical Implementation Guide

Assessment Title

Rule Text

The system must impose the same restrictions on root passwords that are already applied to non-root users.

Description

Discussion Text

Best practices and standard operating procedures for computing systems include password management. If the root account is allowed to be configured with inadequate password controls, the entire system can be compromised.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-50999

Rule

SV-65205r2_rule

Severity

medium

Rule Version

GEN000000-HPUX0225

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If the system is configured for Trusted Mode, this check is not applicable.

For Standard Mode with Security Extensions (SMSE):
Check the /etc/default/security file for the following attribute(s) and attribute values:
PASSWORD_POLICY_STRICT=1
# grep "PASSWORD_POLICY_STRICT" /etc/default/security

If PASSWORD_POLICY_STRICT=0, then the root user is not subject to the same password restrictions as non-root users, and this is a finding.

Implementation Procedure

Fix Text

If the system is operating in Trusted Mode, no fix is required.

For SMSE:
Edit the /etc/default/security file and add/modify the following attribute(s) and attribute values:
PASSWORD_POLICY_STRICT=1

Save the file before exiting the editor.

STIG check 399 of 534 in the HP-UX 11.23 STIG checklist

← Previous · V-4702If the system is an anonymous FTP server, it must be isolated to the DMZ network.Next · V-64039 →The operating system must be a supported release.