The system must prohibit the reuse of passwords within five iterations.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-4084	GEN000800	SV-38679r1_rule	IAIA-1 IAIA-2	Medium

Description
If a user, or root, used the same password continuously or was allowed to change it back shortly after being forced to change it to something else, it would provide a potential intruder with the opportunity to keep guessing at one user's password until it was guessed correctly.

STIG	Date
Draft AIX Security Technical Implementation Guide	2011-08-17

Details

Check Text ( C-36911r1_chk )
Procedure: #lsuser –a histsize ALL If the returned histsize for any user is less than 5, this is a finding.

Fix Text (F-32090r1_fix)
Use the chsec command to configure the system to prohibit the reuse of passwords within five iterations. #chsec –f /etc/security/user –s default –a histsize=5