← Back to SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide

V-261399

CAT II (Medium)

If Network Security Services (NSS) is being used by SLEM 5 it must prohibit the use of cached authentications after one day.

Rule ID

SV-261399r996617_rule

STIG

SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide

Version

V1R4

CCIs

CCI-002007

Discussion

If cached authentication information is out of date, the validity of the authentication information may be questionable.

Check Content

If NSS is used by SLEM 5, verify it prohibits the use of cached authentications after one day with the following command:

Note: If NSS is not used on the operating system, this is not applicable.

     > sudo grep -i "memcache_timeout" /etc/sssd/sssd.conf
     memcache_timeout = 86400

If "memcache_timeout" has a value greater than "86400", the line is commented out, or the line is missing, this is a finding.

Fix Text

Configure NSS, if used by SLEM 5, to prohibit the use of cached authentications after one day.

Add or modify the following line in the "/etc/sssd/sssd.conf" file, below the line "[nss]":

memcache_timeout = 86400