Detections
Analytics

1.81 SOL-11.1-040100

Information

The system must require passwords to contain at least one special character.

GROUP ID: V-216095RULE ID: SV-216095r1016290

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

Solution

The root role is required.

pfedit /etc/default/passwd a

Locate the line containing:

MINSPECIAL

Change the line to read:

MINSPECIAL=1

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|II, CCI|CCI-001619, CCI|CCI-004066, Rule-ID|SV-216095r1016290_rule, STIG-ID|SOL-11.1-040100, Vuln-ID|V-216095

Plugin: Unix

Control ID: 92d75c251c3d3efaf57725ac351aeb1328054f66e9e05b5e411d949947239d9d