https://secscan.acron.pl/ 2026-08-31T09:54:46+00:00 https://secscan.acron.pl/ https://secscan.acron.pl/lib/tpl/bootstrap3/images/favicon.ico text/html 2017-05-04T19:41:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/5/4/1/1?rev=1493919668&do=diff 5.4.1.1 Ensure password expiration is 90 days or less (Scored) Profile Applicability Description The PASS_MAX_DAYS parameter in /etc/login.defs allows an administrator to force passwords to expire once they reach a defined age. It is recommended that the text/html 2017-05-04T19:41:32+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/5/4/1/2?rev=1493919692&do=diff 5.4.1.2 Ensure minimum days between password changes is 7 or more (Scored) Profile Applicability Description The PASS_MIN_DAYS parameter in /etc/login.defs allows an administrator to prevent users from changing their password until a minimum number of days have passed since the last time the user changed their password. It is recommended that text/html 2017-05-04T19:41:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/5/4/1/3?rev=1493919706&do=diff 5.4.1.3 Ensure password expiration warning days is 7 or more (Scored) Profile Applicability Description The PASS_WARN_AGE parameter in /etc/login.defs allows an administrator to notify users that their password will expire in a defined number of days. It is recommended that the text/html 2017-05-05T17:42:58+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/5/4/1/4?rev=1493998978&do=diff 5.4.1.4 Ensure inactive password lock is 30 days or less (Scored) Profile Applicability Description User accounts that have been inactive for over a given period of time can be automatically disabled. It is recommended that accounts that are inactive for 30 days after password expiration be disabled.