bottlerocket-os / bottlerocket-os/bottlerocket-admin-container

Improve accounts management for ssh users

Open
#73 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Shell
Stars
66
Forks
46
Avg merge
20h 48m
Merged PRs (30d)
1

Description

**Issue or Feature Request:**

With the current admin container, there isn't any type of enforcement on passwords, inactive accounts, historical password storage, lock outs, etc. We could increase the security of the admin container by enforcing some of this through policies. A good example of what the policy should enforce is as follows:

- Inactive accounts – 90 days
- 15 minute idle sessions
- Lock within 10 failed attempts, for 30 minutes or more
- New and unique value for all new accounts
- Minimum 12 characters, contain numbers and letters
- Remember the last 4 passwords within the last 12 months
- Passwords changed every 90 days

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.