Rotate your device back to portrait to use STIG Vault.
The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
To verify the password reuse setting is compliant, run the following command:
# grep remember /etc/pam.d/system-auth /etc/pam.d/password-auth
The output must be a line beginning with "password required pam_pwhistory.so" and ending with "remember=5".
If the line is commented out, the line does not contain the specified elements, or the value for "remember" is less than "5", this is a finding.
Do not allow users to reuse recent passwords. This can be accomplished by using the "remember" option for the "pam_pwhistory" PAM module. In the file "/etc/pam.d/system-auth", append "remember=5" to the line which refers to the "pam_pwhistory.so" module, as shown:
password required pam_pwhistory.so [existing_options] remember=5
The DoD requirement is five passwords.