Detections
Analytics

1.280 ALMA-09-035880

Information

AlmaLinux OS 9 must ensure the password complexity module is enabled in the password-auth file.

GROUP ID: V-269386
RULE ID: SV-269386r1050269

Enabling PAM password complexity permits enforcement of strong passwords and consequently makes the system less prone to dictionary attacks.

Solution

Configure AlmaLinux OS 9 to use "pwquality" to enforce password complexity rules.

Add the following line to the "/etc/pam.d/system-auth" and "/etc/pam.d/password-auth" files (or modify the line to have the required value):

password required pam_pwquality.so retry=3

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CCI|CCI-004066, Rule-ID|SV-269386r1050269_rule, STIG-ID|ALMA-09-035880, Vuln-ID|V-269386

Plugin: Unix

Control ID: 8fdb91b4a2df7813b7bb76fadffe6050adb3278b728ed91f56e2b99c10fc27c3