UCF STIG Viewer Logo

Users must not reuse the last 5 passwords.


Overview

Finding ID Version Rule ID IA Controls Severity
V-216325 SOL-11.1-040050 SV-216325r603267_rule Medium
Description
Password complexity, or strength, is a measure of the effectiveness of a password in resisting guessing and brute-force attacks. To meet password policy requirements, passwords need to be changed at specific policy-based intervals. If the operating system allows the user to consecutively reuse their password when the password has exceeded its defined lifetime, the end result is a password that is not changed, per policy requirements.
STIG Date
Solaris 11 SPARC Security Technical Implementation Guide 2021-11-23

Details

Check Text ( C-17561r371063_chk )
Determine if the password history setting is configured properly.

# grep ^HISTORY /etc/default/passwd

If HISTORY is commented out or is not set to 5 or more, this is a finding.
Fix Text (F-17559r371064_fix)
The root role is required.

# pfedit /etc/default/passwd

Locate the line containing:

HISTORY

Change the line to read:

HISTORY=5