The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes (libuser.conf).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-217900	RHEL-06-000064	SV-217900r505923_rule		Medium

Description
Using a stronger hashing algorithm makes password cracking attacks more difficult.

STIG	Date
Red Hat Enterprise Linux 6 Security Technical Implementation Guide	2020-09-03

Details

Check Text ( C-19381r376715_chk )
Inspect "/etc/libuser.conf" and ensure the following line appears in the "[default]" section: crypt_style = sha512 If it does not, this is a finding.

Fix Text (F-19379r376716_fix)
In "/etc/libuser.conf", add or correct the following line in its "[defaults]" section to ensure the system will use the SHA-512 algorithm for password hashing: crypt_style = sha512