UCF STIG Viewer Logo

The Photon operating system must disable new accounts immediately upon password expiration.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239108 PHTN-67-000036 SV-239108r675132_rule Medium
Description
Inactive identifiers pose a risk to systems and applications because attackers may exploit an inactive identifier and potentially obtain undetected access to the system. Owners of inactive accounts will not notice if unauthorized access to their user account has been obtained. Disabling inactive accounts ensures that accounts that may not have been responsibly removed are not available to attackers who may have compromised their credentials.
STIG Date
VMware vSphere 6.7 Photon OS Security Technical Implementation Guide 2022-06-17

Details

Check Text ( C-42319r675130_chk )
At the command line, execute the following command:

# grep INACTIVE /etc/default/useradd

Expected result:

INACTIVE=0

If the output does not match the expected result, this is a finding.
Fix Text (F-42278r675131_fix)
Open /etc/default/useradd with a text editor.

Remove any existing "INACTIVE" line and add the following line:

INACTIVE=0