The Photon operating system must ensure the old passwords are being stored.

Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. If the information system or application allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the result is a password that is not changed per policy requirements.

At the command line, run the following command:

# ls -al /etc/security/opasswd

If "/etc/security/opasswd" does not exist, this is a finding.

At the command line, run the following commands:

# touch /etc/security/opasswd
# chown root:root /etc/security/opasswd
# chmod 0600 /etc/security/opasswd