Detections
Analytics

1.18 UBTU-24-100600

Information

The operating system must have the "libpam-pwquality" package installed.

GROUP ID: V-270661
RULE ID: SV-270661r1067175

Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. "pwquality" enforces complex password construction configuration and has the ability to limit brute-force attacks on the system.

Solution

Install the "pam_pwquality" package by using the following command:

$ sudo apt install -y libpam-pwquality

See Also

https://workbench.cisecurity.org/benchmarks/22775

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-270661r1067175_rule, STIG-ID|UBTU-24-100600, Vuln-ID|V-270661

Plugin: Unix

Control ID: 8683ca92cbbf553c81bf2598b362c01f963cd81b0fa72c0ec3b891f761a1c34e