Details
-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
rhel-9.1.0
-
Assignee, Qa Contact, Doc Contact, Pool Team, Watchers, Developer
-
sst_security_compliance
-
ssg_security
-
False
-
-
Unspecified
-
No Doc Update
-
Unspecified
Description
Description of problem:
After remediating RHEL 9.1 system (CIS Level 2 - Server) we see in /etc/login.defs these changes (among others):
- Password aging controls:
#- PASS_MAX_DAYS Maximum number of days a password may be used.
- PASS_MIN_DAYS Minimum number of days allowed between password changes.
+# PASS_MAX_DAYS 365
+# PASS_MIN_DAYS 1
- PASS_MIN_LEN Minimum acceptable password length.
- PASS_WARN_AGE Number of days warning given before a password expires.
#
-PASS_MAX_DAYS 99999
-PASS_MIN_DAYS 0
+PASS_MAX_DAYS 365
+PASS_MIN_DAYS 1
PASS_WARN_AGE 7
It looks unnecessary to update commented out lines as now the description of the configuration parameters has been removed.
This is a general suggestion, there might be more cases like this. Thanks.
Attachments
Issue Links
- external trackers