Mastering Linux Security and Hardening
上QQ阅读APP看书,第一时间看更新

Hands-on lab for setting account and password expiry data

In this lab, you'll create a couple of new user accounts, set expiration data, and view the results. You can do this lab on either the CentOS or the Ubuntu virtual machine. (The only difference will be with the useradd commands.)

  1. Create a user account for Samson with the expiration date of June 30, 2023, and view the results.

For CentOS:

        sudo useradd -e 2023-06-30 samson
sudo chage -l samson

For Ubuntu:

        sudo useradd -m -d /home/samson -s /bin/bash -e 2023-06-30
sudo chage -l samson
  1. Use usermod to change Samson's account expiration date to July 31, 2023:
        sudo usermod -e 2023-07-31
sudo chage -l samson
  1. Assign a password to Samson's account, then force him to change his password on his first login. Log in as Samson, change his password, then log back out to your own account:
        sudo passwd samson
sudo passwd -e samson
sudo chage -l samson
su - samson
exit
  1. Use chage to set a 5 day waiting period for changing passwords, a password expiration period of 90 days, an inactivity period of 2 days, and a warning period of 5 days:
        sudo chage -m 5 -M 90 -I 2 -W 5 samson
sudo chage -l samson
  1. Keep this account because you'll be using it for the lab in the next section.