TMA-AIX-5.2.6

Ensure password expiration is configured

높음레벨 1자동aix

설명

The maximum password age attribute (maxage) determines the maximum number of weeks that you can use a password before you must change it. The window of opportunity for an attacker to leverage compromised credentials or successfully compromise credentials via an online brute force attack is limited by the age of the password. Audit: reads `lssec -f /etc/security/user -s default -a maxage`.

점검 방법

감사 방식: 셸 명령

shell

command -v lssec >/dev/null 2>&1 || exit 1; out=$(lssec -f /etc/security/user -s default -a maxage 2>/dev/null) || exit 1; v=$(printf '%s\n' "$out" | sed -n 's/.*maxage=\([^ ]*\).*/\1/p'); if [ -n "$v" ] && [ "$v" -ge 1 ] && [ "$v" -le 52 ]; then echo compliant; else echo "maxage=$v"; fi

예상 출력: compliant

조치 방법

조치 방식: 셸 명령

shell

chsec -f /etc/security/user -s default -a maxage=52

속성

운영 체제: 모두
태그: aixpassword-policy
참고 자료: CIS IBM AIX 7 Benchmark v1.2.0 - 5.2.6 Ensure password expiration is configured

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target aix