UCF STIG Viewer Logo

The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes (libuser.conf).


Finding ID Version Rule ID IA Controls Severity
V-217900 RHEL-06-000064 SV-217900r505923_rule Medium
Using a stronger hashing algorithm makes password cracking attacks more difficult.
Red Hat Enterprise Linux 6 Security Technical Implementation Guide 2020-09-03


Check Text ( C-19381r376715_chk )
Inspect "/etc/libuser.conf" and ensure the following line appears in the "[default]" section:

crypt_style = sha512

If it does not, this is a finding.
Fix Text (F-19379r376716_fix)
In "/etc/libuser.conf", add or correct the following line in its "[defaults]" section to ensure the system will use the SHA-512 algorithm for password hashing:

crypt_style = sha512