UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes (login.defs).


Overview

Finding ID Version Rule ID IA Controls Severity
V-38576 RHEL-06-000063 SV-50377r1_rule Medium
Description
Using a stronger hashing algorithm makes password cracking attacks more difficult.
STIG Date
Red Hat Enterprise Linux 6 Security Technical Implementation Guide 2016-06-05

Details

Check Text ( C-46134r1_chk )
Inspect "/etc/login.defs" and ensure the following line appears:

ENCRYPT_METHOD SHA512


If it does not, this is a finding.
Fix Text (F-43524r1_fix)
In "/etc/login.defs", add or correct the following line to ensure the system will use SHA-512 as the hashing algorithm:

ENCRYPT_METHOD SHA512