Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

The Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide (V1 R2) has 391 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

391STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Wed Sep 30 2026

TOSS 5 user account passwords must have a 180-day maximum password lifetime restriction.

Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

Assessment Title

Rule Text

TOSS 5 user account passwords must have a 180-day maximum password lifetime restriction.

Description

Discussion Text

Any password, no matter how complex, can eventually be cracked; therefore, passwords must be changed periodically. If TOSS 5 does not limit the lifetime of passwords and force users to change their passwords, there is the risk that TOSS 5 passwords could be compromised.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-282466

Rule

SV-282466r1262396_rule

Severity

medium

Rule Version

TOSS-05-000292

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check whether the maximum time period for existing passwords is restricted to 180 days with the following commands:

$ sudo awk -F: '$5 > 180 {print $1 "" "" $5}' /etc/shadow

$ sudo awk -F: '$5 <= 0 {print $1 "" "" $5}' /etc/shadow

If any results are returned that are not associated with a system account, this is a finding.

Implementation Procedure

Fix Text

Configure noncompliant accounts to enforce a 180-day maximum password lifetime restriction.

$ sudo passwd -x 180 [user]

STIG check 114 of 391 in the Tri-Lab Operating System Stack (TOSS) 5 STIG checklist

← Previous · V-282465TOSS 5 user account passwords for new users or password changes must have a 180-day maximum password lifetime restriction in /etc/login.defs.Next · V-282467 →TOSS 5 passwords must be created with a minimum of 15 characters.