Set Block Password Change

높음레벨 2수동 검토ibm-i

설명

Specifies the time period during which a password is blocked from being changed following the prior successful password change operation. This system value does not restrict password changes made by the Change User Profile (CHGUSRPRF) command. By restricting the frequency of password changes, an administrator can prevent users from repeatedly changing their password in an attempt to circumvent password reuse controls.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Run DSPSYSVAL SYSVAL(QPWDCHGBLK) (or WRKSYSVAL QPWDCHGBLK) and verify the value is "99". Remediate with: CHGSYSVAL SYSVAL(QPWDCHGBLK) VALUE('99')

조치 방법

조치 방식: 가이드 또는 인프라 패치

To establish the recommended configuration, set the following system value to "99": QPWDCHGBLK CHGSYSVAL SYSVAL(QPWDCHGBLK) VALUE('99')

속성

운영 체제: 모두
태그: ibm-ipassword-policy
참고 자료: CIS IBM i V7R5M0 Benchmark v2.1.0 - 5.1.2.17 Set Block Password Change