Ensure minimum password age is configured

HighLevel 2Automatedaix

Description

The minimum password age determines the number of weeks that you must use a password before you can change it. Users may have favorite passwords that they like to use because they are easy to remember and they believe that their password choice is secure from compromise. Audit: reads `lssec -f /etc/security/user -s default -a minage`.

How it is checked

Audit method: Shell command

shell

command -v lssec >/dev/null 2>&1 || exit 1; out=$(lssec -f /etc/security/user -s default -a minage 2>/dev/null) || exit 1; v=$(printf '%s\n' "$out" | sed -n 's/.*minage=\([^ ]*\).*/\1/p'); if [ -n "$v" ] && [ "$v" -ge 1 ]; then echo compliant; else echo "minage=$v"; fi

Expected output: compliant

How it is fixed

Fix method: Shell command

shell

chsec -f /etc/security/user -s default -a minage=1

Properties

Operating systems: Any
Tags: aixpassword-policy
Reference: CIS IBM AIX 7 Benchmark v1.2.0 - 5.2.2 Ensure minimum password age is configured

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target aix --level 2