The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes (libuser.conf).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-208839	OL6-00-000064	SV-208839r793624_rule		Medium

Description
Using a stronger hashing algorithm makes password cracking attacks more difficult.

STIG	Date
Oracle Linux 6 Security Technical Implementation Guide	2021-12-03

Details

Check Text ( C-9092r357497_chk )
Inspect "/etc/libuser.conf" and ensure the following line appears in the "[default]" section: crypt_style = sha512 If it does not, this is a finding.

Fix Text (F-9092r357498_fix)
In "/etc/libuser.conf", add or correct the following line in its "[defaults]" section to ensure the system will use the SHA-512 algorithm for password hashing: crypt_style = sha512