Check: GEN000800
Solaris 10 SPARC STIG:
GEN000800
(in versions v2 r4 through v1 r17)
Title
The system must prohibit the reuse of passwords within five iterations. (Cat II impact)
Discussion
If a user, or root, used the same password continuously or was allowed to change it back shortly after being forced to change it to something else, it would provide a potential intruder with the opportunity to keep guessing at one user's password until it was guessed correctly.
Check Content
Check the HISTORY setting. # grep HISTORY /etc/default/passwd If HISTORY is not set to 5 or more, this is a finding.
Fix Text
Edit /etc/default/passwd and set HISTORY to 5.
Additional Identifiers
Rule ID: SV-226469r603265_rule
Vulnerability ID: V-226469
Group Title: SRG-OS-000077
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000200 |
The information system prohibits password reuse for the organization-defined number of generations. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| IA-5(1) |
Password-based Authentication |