An XCCDF Group - A logical subset of the XCCDF Benchmark
/etc/passwd
/etc/shadow
/etc/login.defs
passwd
su
login
login.defs(5)
PASS_MAX_DAYS
-M
PASS_MIN_DAYS
-m
PASS_WARN_AGE
-W
$ sudo chage -M 180 -m 7 -W 7 USER
PASS_MIN_LEN
15
12
pam_pwquality
$ sudo chage -M root
/etc/pam.d/system-auth
/etc/pam.d/password-auth
rounds
pam_unix
rounds=
pam_unix.so
password sufficient pam_unix.so ...existing_options... rounds=
sudo
/etc/securetty
/dev/console
/dev/tty*
/dev/vc/*
root
$ sudo echo > /etc/securetty