BaselineWatch
Apply as published
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

Linux RHEL-10-600750

DISA STIG RHEL-10-600750 (CAT I): RHEL 10 must be configured so that user and group account administration utilities are configured to store only encrypted representations of passwords.

DISA STIG recommends

RHEL-10-600750 CAT I

RHEL 10 must be configured so that user and group account administration utilities are configured to store only encrypted representations of passwords.

NIST SP 800-53: IA-5(1)

Check

Note: If the libuser package is not installed, this requirement is not applicable. Verify RHEL 10 user and group account administration utilities are configured to store only encrypted representations of passwords with the following command: $ sudo grep -i "^crypt_style" /etc/libuser.conf crypt_style = sha512 If the "crypt_style" variable is not set to "sha512", is not in the defaults section, is commented out, or does not exist, this is a finding.

Fix

Configure RHEL 10 to use the SHA-512 algorithm for password hashing. Add or change the following line in the "[defaults]" section of the "/etc/libuser.conf" file: crypt_style = sha512

Our decision

Apply as published

No decision recorded: the recommendation stands. The owner signs in to change it.

All Linux decisions · The Linux baseline · The Linux test plan