SRG-OS-000076-GPOS-00044 Controls

STIG ID Version Title Product
ALMA-09-037970 V1R1 Passwords for existing users must have a 60-day maximum password lifetime restriction in /etc/shadow.
ALMA-09-038080 V1R1 Passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.
APPL-14-003008 V2R2 The macOS system must restrict maximum password lifetime to 60 days.
OL07-00-010250 V3R1 The Oracle Linux operating system must be configured so that passwords for new users are restricted to a 60-day maximum lifetime.
OL07-00-010260 V3R1 The Oracle Linux operating system must be configured so that existing passwords are restricted to a 60-day maximum lifetime.
OL08-00-020200 V2R2 OL 8 user account passwords must have a 60-day maximum password lifetime restriction.
OL08-00-020210 V2R2 OL 8 user account passwords must be configured so that existing passwords are restricted to a 60-day maximum lifetime.
RHEL-07-010250 V3R9 The Red Hat Enterprise Linux operating system must be configured so that passwords for new users are restricted to a 60-day maximum lifetime.
RHEL-07-010260 V3R9 The Red Hat Enterprise Linux operating system must be configured so that existing passwords are restricted to a 60-day maximum lifetime.
RHEL-08-020200 V2R1 RHEL 8 user account passwords must have a 60-day maximum password lifetime restriction.
RHEL-08-020210 V2R1 RHEL 8 user account passwords must be configured so that existing passwords are restricted to a 60-day maximum lifetime.
RHEL-09-411010 V2R2 RHEL 9 user account passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.
RHEL-09-411015 V2R2 RHEL 9 user account passwords must have a 60-day maximum password lifetime restriction.
SLES-12-010280 V3R1 The SUSE operating system must be configured to create or update passwords with a maximum lifetime of 60 days.
SLES-12-010290 V3R1 The SUSE operating system must employ user passwords with a maximum lifetime of 60 days.
SLES-15-020220 V2R2 The SUSE operating system must be configured to create or update passwords with a maximum lifetime of 60 days.
SLES-15-020230 V2R2 The SUSE operating system must employ user passwords with a maximum lifetime of 60 days.
UBTU-18-010107 V2R15 The Ubuntu operating system must enforce a 60-day maximum password lifetime restriction. Passwords for new users must have a 60-day maximum password lifetime restriction.
UBTU-20-010008 V2R1 The Ubuntu operating system must enforce a 60-day maximum password lifetime restriction. Passwords for new users must have a 60-day maximum password lifetime restriction.
UBTU-22-411030 V2R2 Ubuntu 22.04 LTS must enforce a 60-day maximum password lifetime restriction. Passwords for new users must have a 60-day maximum password lifetime restriction.
WN10-00-000090 V3R2 Accounts must be configured to require password expiration.
WN10-AC-000025 V3R2 The maximum password age must be configured to 60 days or less.
WN10-SO-000280 V3R2 Passwords for enabled local Administrator accounts must be changed at least every 60 days.
WN11-00-000090 V2R2 Accounts must be configured to require password expiration.
WN11-AC-000025 V2R2 The maximum password age must be configured to 60 days or less.
WN11-SO-000280 V2R2 Passwords for enabled local Administrator accounts must be changed at least every 60 days.
WN16-00-000030 V2R9 Passwords for the built-in Administrator account must be changed at least every 60 days.
WN16-00-000230 V2R9 Passwords must be configured to expire.
WN16-AC-000050 V2R9 Windows Server 2016 maximum password age must be configured to 60 days or less.
WN19-00-000020 V3R2 Windows Server 2019 passwords for the built-in Administrator account must be changed at least every 60 days.
WN19-00-000210 V3R2 Windows Server 2019 passwords must be configured to expire.
WN19-AC-000050 V3R2 Windows Server 2019 maximum password age must be configured to 60 days or less.
WN22-00-000020 V2R2 Windows Server 2022 passwords for the built-in Administrator account must be changed at least every 60 days.
WN22-00-000210 V2R2 Windows Server 2022 passwords must be configured to expire.
WN22-AC-000050 V2R2 Windows Server 2022 maximum password age must be configured to 60 days or less.