Detections
Analytics

1.166 OL08-00-020100

Information

OL 8 must ensure the password complexity module is enabled in the password-auth file.

GROUP ID: V-248686RULE ID: SV-248686r982195

Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Use of "pwquality" enforces complex password construction configuration and has the ability to limit brute-force attacks on the system.

OL 8 uses "pwquality" as a mechanism to enforce password complexity. This is set in both of the following:/etc/pam.d/password-auth/etc/pam.d/system-auth

Satisfies: SRG-OS-000069-GPOS-00037, SRG-OS-000070-GPOS-00038

Solution

Configure the operating system to use "pwquality" to enforce password complexity rules.

Add the following line to the "/etc/pam.d/password-auth" file (or modify the line to have the required value):

password requisite pam_pwquality.so

See Also

https://workbench.cisecurity.org/benchmarks/23791

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-248686r982195_rule, STIG-ID|OL08-00-020100, Vuln-ID|V-248686

Plugin: Unix

Control ID: 807eb9ec868d7d3e0332782001c2dcdfdaa3b39ed6ebdf922ed41dee9eeb8605