UCF STIG Viewer Logo

If Network Security Services (NSS) is being used by the SUSE operating system it must prohibit the use of cached authentications after one day.


Overview

Finding ID Version Rule ID IA Controls Severity
V-234857 SLES-15-010490 SV-234857r854203_rule Medium
Description
If cached authentication information is out of date, the validity of the authentication information may be questionable.
STIG Date
SUSE Linux Enterprise Server 15 Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-38045r618840_chk )
If NSS is not used on the operating system, this is Not Applicable.

If NSS is used by the SUSE operating system, verify it prohibits the use of cached authentications after one day.

Check that cached authentications cannot be used after one day with the following command:

> sudo grep -i "memcache_timeout" /etc/sssd/sssd.conf

memcache_timeout = 86400

If "memcache_timeout" has a value greater than "86400", or is missing, this is a finding.
Fix Text (F-38008r618841_fix)
Configure NSS, if used by the SUSE operating system, to prohibit the use of cached authentications after one day.

Add or change the following line in "/etc/sssd/sssd.conf" just below the line "[nss]":

memcache_timeout = 86400