TMA-AIX-5.2.2

Ensure minimum password age is configured

AltaNivel 2Automatizadaaix

Descripción

The minimum password age determines the number of weeks that you must use a password before you can change it. Users may have favorite passwords that they like to use because they are easy to remember and they believe that their password choice is secure from compromise. Audit: reads `lssec -f /etc/security/user -s default -a minage`.

Cómo se verifica

Método de auditoría: Comando de shell

shell

command -v lssec >/dev/null 2>&1 || exit 1; out=$(lssec -f /etc/security/user -s default -a minage 2>/dev/null) || exit 1; v=$(printf '%s\n' "$out" | sed -n 's/.*minage=\([^ ]*\).*/\1/p'); if [ -n "$v" ] && [ "$v" -ge 1 ]; then echo compliant; else echo "minage=$v"; fi

Salida esperada: compliant

Cómo se corrige

Método de corrección: Comando de shell

shell

chsec -f /etc/security/user -s default -a minage=1

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: aixpassword-policy
Referencia: CIS IBM AIX 7 Benchmark v1.2.0 - 5.2.2 Ensure minimum password age is configured

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target aix --level 2