Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
RHEL 10 must disable account identifiers (individuals, groups, roles, and devices) after 35 days of inactivity.
Description
Discussion Text
Inactive identifiers pose a risk to systems and applications because attackers may exploit an inactive identifier and potentially obtain undetected access to the system.
Disabling inactive accounts ensures accounts that may not have been responsibly removed are not available to attackers who may have compromised their credentials.
Owners of inactive accounts will not notice if unauthorized access to their user account has been obtained.
Satisfies: SRG-OS-000118-GPOS-00060, SRG-OS-000590-GPOS-00110
Disabling inactive accounts ensures accounts that may not have been responsibly removed are not available to attackers who may have compromised their credentials.
Owners of inactive accounts will not notice if unauthorized access to their user account has been obtained.
Satisfies: SRG-OS-000118-GPOS-00060, SRG-OS-000590-GPOS-00110
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.