UCF STIG Viewer Logo

Emergency accounts must be provisioned with an expiration date.


Finding ID Version Rule ID IA Controls Severity
V-218046 RHEL-06-000298 SV-218046r505923_rule Low
When emergency accounts are created, there is a risk they may remain in place and active after the need for them no longer exists. Account expiration greatly reduces the risk of accounts being misused or hijacked.
Red Hat Enterprise Linux 6 Security Technical Implementation Guide 2020-09-03


Check Text ( C-19527r377153_chk )
For every emergency account, run the following command to obtain its account aging and expiration information:

# chage -l [USER]

Verify each of these accounts has an expiration date set as documented.
If any emergency accounts have no expiration date set or do not expire within a documented time frame, this is a finding.
Fix Text (F-19525r377154_fix)
In the event emergency accounts are required, configure the system to terminate them after a documented time period. For every emergency account, run the following command to set an expiration date on it, substituting "[USER]" and "[YYYY-MM-DD]" appropriately:

# chage -E [YYYY-MM-DD] [USER]

"[YYYY-MM-DD]" indicates the documented expiration date for the account.