Home
Security Hardening
DISA STIG Ubuntu 16.04 LTS V2R3

DISA STIG Ubuntu 16.04 LTS V2R3

UBTU-16-010110 – The Ubuntu operating system must enforce password complexity by requiring that at least one lower-case character be used.
Details Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity,...
UBTU-16-010120 – The Ubuntu operating system must enforce password complexity by requiring that at least one numeric character be used.
Details Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity,...
UBTU-16-010130 – All passwords must contain at least one special character.
Details Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity...
UBTU-16-010140 – The Ubuntu operating system must require the change of at least 8 characters when passwords are changed.
Details If the Ubuntu operating system allows the user to consecutively reuse extensive portions of passwords, this increases the chances...
UBTU-16-010150 – The Ubuntu operating system must encrypt all stored passwords with a FIPS 140-2 approved cryptographic hashing algorithm.
Details Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords...
UBTU-16-010160 – The Ubuntu operating system must employ a FIPS 140-2 approved cryptographic hashing algorithms for all stored passwords.
Details The system must use a strong hashing algorithm to store the password. The system must use a sufficient number...
UBTU-16-010170 – The Ubuntu operating system must employ FIPS 140-2 approved cryptographic hashing algorithms for all created passwords.
Details The system must use a strong hashing algorithm to store the password. The system must use a sufficient number...
UBTU-16-010180 – The pam_unix.so module must use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication.
Details Unapproved mechanisms that are used for authentication to the cryptographic module are not verified and therefore cannot be relied...
UBTU-16-010200 – Emergency administrator accounts must never be automatically removed or disabled.
Details Emergency accounts are privileged accounts that are established in response to crisis situations where the need for rapid account...
UBTU-16-010210 – Passwords for new users must have a 24 hours/1 day minimum password lifetime restriction.
Details Enforcing a minimum password lifetime helps to prevent repeated password changes to defeat the password reuse or history enforcement...

Prev Next

DISA STIG Ubuntu 16.04 LTS V2R3

UBTU-16-010110 – The Ubuntu operating system must enforce password complexity by requiring that at least one lower-case character be used.

UBTU-16-010120 – The Ubuntu operating system must enforce password complexity by requiring that at least one numeric character be used.

UBTU-16-010130 – All passwords must contain at least one special character.

UBTU-16-010140 – The Ubuntu operating system must require the change of at least 8 characters when passwords are changed.

UBTU-16-010150 – The Ubuntu operating system must encrypt all stored passwords with a FIPS 140-2 approved cryptographic hashing algorithm.

UBTU-16-010160 – The Ubuntu operating system must employ a FIPS 140-2 approved cryptographic hashing algorithms for all stored passwords.

UBTU-16-010170 – The Ubuntu operating system must employ FIPS 140-2 approved cryptographic hashing algorithms for all created passwords.

UBTU-16-010180 – The pam_unix.so module must use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication.

UBTU-16-010200 – Emergency administrator accounts must never be automatically removed or disabled.

UBTU-16-010210 – Passwords for new users must have a 24 hours/1 day minimum password lifetime restriction.