Detections
Analytics

5.3.1.3 Ensure latest version of libpwquality is installed

Information

libpwquality provides common functions for password quality checking and scoring them based on their apparent randomness. The library also provides a function for generating random passwords with good pronounceability.

This module can be plugged into the password stack of a given service to provide some plug-in strength-checking for passwords. The code was originally based on pam_cracklib module and the module is backwards compatible with its options.

Strong password requirements reduce the risk of successful password guessing and brute-force attacks. Ensuring a current version of libpwquality is installed makes the password-quality checking features used by this Benchmark available.

Solution

Run the following command to install or update libpwquality to the latest version:

# dnf install libpwquality

See Also

https://workbench.cisecurity.org/benchmarks/27891

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2

Plugin: Unix

Control ID: a259ad6fd989e006ca34f1c10068889a266c64e2716dafe425354ebb9b253ec9