Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

Temporary accounts must be provisioned with an expiration date.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

Temporary accounts must be provisioned with an expiration date.

Description

Discussion Text

When temporary accounts are created, there is a risk they may remain in place and active after the need for them no longer exists. Account expiration greatly reduces the risk of accounts being misused or hijacked.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-209027

Rule

SV-209027r793748_rule

Severity

low

Rule Version

OL6-00-000297

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

For every temporary account, run the following command to obtain its account aging and expiration information: 

# chage -l [USER]

Verify each of these accounts has an expiration date set as documented.
 
If any temporary accounts have no expiration date set or do not expire within a documented time frame, this is a finding.

Implementation Procedure

Fix Text

In the event temporary accounts are required, configure the system to terminate them after a documented time period.

For every temporary account, run the following command to set an expiration date on it, substituting "[USER]" and "[YYYY-MM-DD]" appropriately: 

# chage -E [YYYY-MM-DD] [USER]

"[YYYY-MM-DD]" indicates the documented expiration date for the account.

STIG check 160 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-209026All accounts on the system must have unique user or account names.Next · V-209028 →Emergency accounts must be provisioned with an expiration date.