>From e7d569dc7a8bbf392c2adef1557910155db2b3e9 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Thu, 25 Apr 2013 20:11:56 -0400 Subject: [PATCH 43/64] Mapped IA-5(1)(d) to password min/max length rules --- .../accounts/restrictions/password_expiration.xml | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) diff --git a/RHEL6/input/system/accounts/restrictions/password_expiration.xml b/RHEL6/input/system/accounts/restrictions/password_expiration.xml index 5b45aa1..099b4aa 100644 --- a/RHEL6/input/system/accounts/restrictions/password_expiration.xml +++ b/RHEL6/input/system/accounts/restrictions/password_expiration.xml @@ -122,7 +122,7 @@ The DoD requirement is 1. To check the minimum password age, run the command:
$ grep PASS_MIN_DAYS /etc/login.defs
-The DoD requirement is 1. +The DoD and FISMA requirement is 1.
Setting the minimum password age protects against @@ -131,7 +131,7 @@ after satisfying the password reuse requirement. - + @@ -148,7 +148,7 @@ The DoD requirement is 60. To check the maximum password age, run the command:
$ grep PASS_MAX_DAYS /etc/login.defs
-The DoD requirement is 60. +The DoD and FISMA requirement is 60. A value of 180 days is sufficient for many environments.
@@ -159,7 +159,7 @@ increases the risk of users writing down the password in a convenient location subject to physical compromise. - + -- 1.7.1