Any password, no matter how complex, can eventually be cracked. Therefore, passwords need to be changed periodically. One method of minimizing this risk is to use complex passwords and periodically change them. If the operating system does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the operating system passwords could be compromised. Fix: To set the password policy, run the following command: sudo pwpolicy setglobalpolicy 'maxMinutesUntilChangePassword=86400' Note: This patch is known to cause issues with root login incases where root account password was never set. If using root account ensure password is set before patching. Incase of issues consider rolling back the patch.

[Seconds]

To set the password policy, run the following command: sudo pwpolicy setglobalpolicy 'maxMinutesUntilChangePassword=86400'