TMA-IBM-I-5.1.2.17
Set Block Password Change
Descrição
Specifies the time period during which a password is blocked from being changed following the prior successful password change operation. This system value does not restrict password changes made by the Change User Profile (CHGUSRPRF) command. By restricting the frequency of password changes, an administrator can prevent users from repeatedly changing their password in an attempt to circumvent password reuse controls.
Como é verificado
Método de auditoria: Revisão manual
Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.
Run DSPSYSVAL SYSVAL(QPWDCHGBLK) (or WRKSYSVAL QPWDCHGBLK) and verify the value is "99". Remediate with: CHGSYSVAL SYSVAL(QPWDCHGBLK) VALUE('99')
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
To establish the recommended configuration, set the following system value to "99": QPWDCHGBLK CHGSYSVAL SYSVAL(QPWDCHGBLK) VALUE('99')
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- ibm-ipassword-policy
- Referência
- CIS IBM i V7R5M0 Benchmark v2.1.0 - 5.1.2.17 Set Block Password Change