Detections
Analytics

1.94 UBTU-22-611030

Information

The operating system must prevent the use of dictionary words for passwords.

GROUP ID: V-260564
RULE ID: SV-260564r991587

If the operating system allows the user to select passwords based on dictionary words, then this increases the chances of password compromise by increasing the opportunity for successful guesses and brute-force attacks.

Solution

Configure the operating system to prevent the use of dictionary words for passwords.

Add or modify the following line in the "/etc/security/pwquality.conf" file:

dictcheck = 1

See Also

https://workbench.cisecurity.org/benchmarks/22168

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, CSCv7|4.4, Rule-ID|SV-260564r991587_rule, STIG-ID|UBTU-22-611030, Vuln-ID|V-260564

Plugin: Unix

Control ID: 8a331b3ef152f9890496736e8ad73e8ed057164fbb2c94350dfa176e809113a7