V-38479: User passwords must be changed at least every 60 days.
---------------------------------------------------------------

Setting the password maximum age ensures users are required to periodically
change their passwords. This could possibly decrease the utility of a stolen
password. Requiring shorter password lifetimes increases the risk of users
writing down the password in a convenient location subject to physical
compromise.

Details: `V-38479 in STIG Viewer`_.

.. _V-38479 in STIG Viewer: https://www.stigviewer.com/stig/red_hat_enterprise_linux_6/2015-05-26/finding/V-38479

Notes for deployers
~~~~~~~~~~~~~~~~~~~

.. include:: developer-notes/V-38479.rst