Detections
Analytics

1.115 ALMA-09-015750

Information

AlmaLinux OS 9 must not allow blank or null passwords.

GROUP ID: V-269218
RULE ID: SV-269218r1050100

If an account has an empty password, anyone could log in and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.

Solution

Remove any instances of the "nullok" option in the "/etc/pam.d/password-auth" and "/etc/pam.d/system-auth" files to prevent logons with empty passwords.

Note: Manual changes to the listed file may be overwritten by the "authselect" program.

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269218r1050100_rule, STIG-ID|ALMA-09-015750, Vuln-ID|V-269218

Plugin: Unix

Control ID: 05bdc6f6fd81db012f0d9d5547aaaa92b5a1757b35869346b4e2fde21c5815d1