Detections
Analytics

1.284 RHEL-10-600630

Information

RHEL 10 must ensure the password complexity module is enabled in the "system-auth" file.

GROUP ID: V-281215RULE ID: SV-281215r1166597

Enabling Pluggable Authentication Module (PAM) password complexity permits enforcement of strong passwords and consequently makes the system less prone to dictionary attacks.

Solution

Configure RHEL 10 to use "pwquality" to enforce password complexity rules.

Add the following line to the "/etc/pam.d/system-auth" file (or modify the line to have the required value):

password required pam_pwquality.so

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|II, CCI|CCI-004066, Rule-ID|SV-281215r1166597_rule, STIG-ID|RHEL-10-600630, Vuln-ID|V-281215

Plugin: Unix

Control ID: 97a04862efc2e9551c2b5939945ca997029df7b2dfa30fafad599dd9a05c8e6e