Detections
Analytics

1.101 SLES-15-020290

Information

The SUSE operating system must prevent the use of dictionary words for passwords.

GROUP ID: V-234897
RULE ID: SV-234897r991587

If the SUSE operating system allows the user to select passwords based on dictionary words, this increases the chances of password compromise by increasing the opportunity for successful guesses and brute-force attacks.

Solution

Configure the SUSE operating system to prevent the use of dictionary words for passwords.

Edit "/etc/pam.d/common-password" and add the following line:

password requisite pam_cracklib.so

See Also

https://workbench.cisecurity.org/benchmarks/23779

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-234897r991587_rule, STIG-ID|SLES-15-020290, Vuln-ID|V-234897

Plugin: Unix

Control ID: 120daa81c03acd8ab9eaec3cd0fad11d530cfe09fb612891d5b801e90da81666