Ensure minimum days between password changes is 7 or more

낮음레벨 2수동 검토cos

설명

The PASS_MIN_DAYS parameter in /etc/login.defs allows an administrator to prevent users from changing their password until a minimum number of days have passed since the last time the user changed their password. It is recommended that PASS_MIN_DAYS parameter be set to 7 or more days. By restricting the frequency of password changes, an administrator can prevent users from repeatedly changing their password in an attempt to circumvent password reuse controls.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Run the following command and verify PASS_MIN_DAYS conforms to site policy (no less than 7 days): # grep PASS_MIN_DAYS /etc/login.defs PASS_MIN_DAYS 7 Run the following command and Review list of users and PAS_MIN_DAYS to Verify that all users' PAS_MIN_DAYS conform s to site policy (no less than 7 days): # grep -E ^[^:]+:[^\!*] /etc/shadow | cut -d: -f1,4 <user>:<PASS_MIN_DAYS>

조치 방법

조치 방식: 가이드 또는 인프라 패치

Set the PASS_MIN_DAYS parameter to 7 in /etc/login.defs : PASS_MIN_DAYS 7 Modify user parameters for all users with a password set to match: # chage --mindays 7 <user>

속성

운영 체제: 모두
태그: authcontainer-optimized-oscos
참고 자료: CIS Google Container-Optimized OS Benchmark v1.2.0 - 5.3.1.2 Ensure minimum days between password changes is 7 or more