The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes (libuser.conf).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-38577	RHEL-06-000064	SV-50378r1_rule		Medium

Description
Using a stronger hashing algorithm makes password cracking attacks more difficult.

STIG	Date
Red Hat Enterprise Linux 6 Security Technical Implementation Guide	2019-03-08

Details

Check Text ( C-46135r1_chk )
Inspect "/etc/libuser.conf" and ensure the following line appears in the "[default]" section: crypt_style = sha512 If it does not, this is a finding.

Fix Text (F-43525r1_fix)
In "/etc/libuser.conf", add or correct the following line in its "[defaults]" section to ensure the system will use the SHA-512 algorithm for password hashing: crypt_style = sha512