Detections
Analytics
AIX7-00-001136 - AIX must require passwords to contain no more than three consecutive repeating characters.
Information
Passwords with excessive repeating characters may be more vulnerable to password-guessing attacks.Solution
Use the "chsec" command to set "maxrepeats" to "3" for the default stanza:# chsec -f /etc/security/user -s default -a maxrepeats=3
Use the "chsec" command to set "maxrepeats" to "3" for all the users who have "maxrepeats" values that are greater than "3", or its value is set to "0":
# chuser maxrepeats=3 [user_name]
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip
Item Details
Audit Name: DISA IBM AIX 7.x STIG v3r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215232r991589_rule, STIG-ID|AIX7-00-001136, STIG-Legacy|SV-101765, STIG-Legacy|V-91667, Vuln-ID|V-215232
Plugin: Unix
Control ID: da2ec9c1745c1c197033ca33867f57a7f87a84abc8c7f0fbbe6c1be462e7610a