Detections
Analytics

1.168 AZLX-23-002489

Information

Amazon Linux 2023 must ensure the password complexity module is enabled in the password-auth file.

GROUP ID: V-274161RULE ID: SV-274161r1120471

Enabling PAM password complexity permits enforcement of strong passwords and consequently makes the system less prone to dictionary attacks.

Solution

Configure Amazon Linux 2023 to use "pwquality" to enforce password complexity rules.

Add the following line to the "/etc/pam.d/password-auth" file (or modify the line to have the required value):

password required pam_pwquality.so

See Also

https://workbench.cisecurity.org/benchmarks/26107

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|II, CCI|CCI-000192, CCI|CCI-000193, CCI|CCI-004066, Rule-ID|SV-274161r1120471_rule, STIG-ID|AZLX-23-002489, Vuln-ID|V-274161

Plugin: Unix

Control ID: 12508a0795fc87e96a1af19dd784db58be22bf00d431c024bb2100db2b37a9fd