SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide

The SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide (V1 R5) has 210 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

210STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R5

CurrentPublished Wed Sep 30 2026

If Network Security Services (NSS) is being used by SLEM 5 it must prohibit the use of cached authentications after one day.

SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide

Assessment Title

Rule Text

If Network Security Services (NSS) is being used by SLEM 5 it must prohibit the use of cached authentications after one day.

Description

Discussion Text

If cached authentication information is out of date, the validity of the authentication information may be questionable.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-261399

Rule

SV-261399r996617_rule

Severity

medium

Rule Version

SLEM-05-631010

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If NSS is used by SLEM 5, verify it prohibits the use of cached authentications after one day with the following command:

Note: If NSS is not used on the operating system, this is not applicable.

     > sudo grep -i "memcache_timeout" /etc/sssd/sssd.conf
     memcache_timeout = 86400

If "memcache_timeout" has a value greater than "86400", the line is commented out, or the line is missing, this is a finding.

Implementation Procedure

Fix Text

Configure NSS, if used by SLEM 5, to prohibit the use of cached authentications after one day.

Add or modify the following line in the "/etc/sssd/sssd.conf" file, below the line "[nss]":

memcache_timeout = 86400

STIG check 134 of 210 in the SUSE Linux Enterprise Micro (SLEM) 5 STIG checklist

← Previous · V-261398SLEM 5 must implement certificate status checking for multifactor authentication.Next · V-261400 →SLEM 5 must configure the Linux Pluggable Authentication Modules (PAM) to prohibit the use of cached offline authentications after one day.