Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

Users must not be able to change passwords more than once every 24 hours.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

Users must not be able to change passwords more than once every 24 hours.

Description

Discussion Text

Setting the minimum password age protects against users cycling back to a favorite password after satisfying the password reuse requirement.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-208827

Rule

SV-208827r793612_rule

Severity

medium

Rule Version

OL6-00-000051

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

To check the minimum password age, run the command: 

$ grep PASS_MIN_DAYS /etc/login.defs

The DoD requirement is 1. 
If it is not set to the required value, this is a finding.

Implementation Procedure

Fix Text

To specify password minimum age for new accounts, edit the file "/etc/login.defs" and add or correct the following line, replacing [DAYS] appropriately: 

PASS_MIN_DAYS [DAYS]

A value of 1 day is considered sufficient for many environments. The DoD requirement is 1.

STIG check 35 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-208826The system must require passwords to contain a minimum of 15 characters.Next · V-208828 →User passwords must be changed at least every 60 days.