Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
User passwords must be changed at least every 180 days.
Description
Discussion Text
Limiting the lifespan of authenticators limits the period of time an unauthorized user has access to the system while using compromised credentials and reduces the period of time available for password-guessing attacks to run against a single password.
Solaris 11.4 introduced new password security features that allow for a more granular approach to password duration parameters. The introduction of "MAXDAYS", "MINDAYS", and "WARNDAYS" allow the "/etc/default/passwd" configuration file to enforce a password change every 180 days.
Solaris 11.4 introduced new password security features that allow for a more granular approach to password duration parameters. The introduction of "MAXDAYS", "MINDAYS", and "WARNDAYS" allow the "/etc/default/passwd" configuration file to enforce a password change every 180 days.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.