From cb006aed37a1dec80e0e36ccb12afc04d428b91a Mon Sep 17 00:00:00 2001 From: Eric Berry Date: Tue, 26 Nov 2024 15:41:14 -0800 Subject: [PATCH] Ubuntu 24.04 5.4.1.5 account_disable_post_pw_expiration 45 days --- controls/cis_ubuntu2404.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/controls/cis_ubuntu2404.yml b/controls/cis_ubuntu2404.yml index 3323ddee88f..88f83e4a03e 100644 --- a/controls/cis_ubuntu2404.yml +++ b/controls/cis_ubuntu2404.yml @@ -2083,11 +2083,11 @@ controls: levels: - l1_server - l1_workstation - related_rules: - - var_account_disable_post_pw_expiration=30 + rules: + - var_account_disable_post_pw_expiration=45 - account_disable_post_pw_expiration - status: planned - notes: TODO. Partial/incorrect implementation exists.See related rules. Analogous to ubuntu2204/5.5.1.4. + status: automated + notes: CIS setting now 45 days. - id: 5.4.1.6 title: Ensure all users last password change date is in the past (Automated)