Ensure 'PASSWORD_LIFE_TIME' Is LESS than or Equal to '365'

СредњаНиво 1Ручни прегледoceanbase

Опис

The PASSWORD_LIFE_TIME setting determines how long a password may be used before the user is required to be change it. The suggested value for this is 365 days or less.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

In the Oracle-mode tenant run SELECT PROFILE, RESOURCE_NAME, LIMIT FROM SYS.DBA_PROFILES WHERE PROFILE = 'DEFAULT' AND RESOURCE_NAME = 'PASSWORD_LIFE_TIME'; The value must be 365 (days) or less; UNLIMITED is a finding. Check other profiles in use the same way.

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Remediate this setting by executing the following SQL statement for each PROFILE returned by the audit procedure. ALTER PROFILE <profile_name> LIMIT PASSWORD_LIFE_TIME 365;

Својства

Оперативни системи: Било који
Ознаке: oceanbaseauthenticationoracle-mode
Референца: CIS OceanBase Enterprise Edition V4 Benchmark v1.0.0 - 5.1.3 Ensure 'PASSWORD_LIFE_TIME' Is LESS than or Equal to '365'