世界500强企业的主机系统安全配置标准

lpd:9 printq:9

imnadm (no assigned UID) cron:8

ipsec (no assigned UID) audit:10

ldap (no assigned UID) shutdown:21

lp (no assigned UID) ecs:28

snapp (no assigned UID) imnadm (no assigned GID)

ipsec (no assigned GID)

ldap (no assigned GID)

lp (no assigned GID)

haemrm (no assigned GID)

snapp (no assigned GID)

4.4 密码要求

密码的强度要求，Solaris系统的具体要求如下：相关配置文件

/etc/default/passwd。

系统值/参数 描述 设置要求

MAXWEEKS 密码有效期限的最大周数

(Maximum number of weeks that can pass before a password must be changed.) 13

WARNWEEKS 在密码过期前的警告信息显示

(Number of weeks show warning message before the password expired.) 2 MINWEEKS 密码有效期限的最少周数

(Minimum number of weeks that must pass before a password can be changed) 0

PASSLENGTH 密码长度

(Password length) 8

AIX系统的具体要求如下：相关配置文件/etc/security/user。

系统值/参数 描述 设置要求

maxage 密码有效期限的最大周数

(Maximum number of weeks that can pass before a password must be changed.) 13

maxrepeats 可重复的连续字符数