PHTN-67-000030 - The Photon operating system must ensure old passwords are being stored.

Information

Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. If the information system or application allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the end result is a password that is not changed as per policy requirements.

Solution

At the command line, execute the following commands:

# touch /etc/security/opasswd
# chown root:root /etc/security/opasswd
# chmod 0600 /etc/security/opasswd

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-7_Y23M07_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1)(e), CAT|II, CCI|CCI-000200, Rule-ID|SV-239102r675114_rule, STIG-ID|PHTN-67-000030, Vuln-ID|V-239102

Plugin: Unix

Control ID: 0980e6107828a6d9ac0e006ce7e97523910ed4e0281710f30f4f264e12fc46bc