Detections
Analytics
OL09-00-001010 - OL 9 must ensure the password complexity module is enabled in the password-auth file.
Information
Enabling PAM password complexity permits enforcement of strong passwords and consequently makes the system less prone to dictionary attacks.Satisfies: SRG-OS-000069-GPOS-00037, SRG-OS-000070-GPOS-00038
Solution
Configure OL 9 to use "pwquality" to enforce password complexity rules.Add the following line to the "/etc/pam.d/password-auth" file (or modify the line to have the required value):
password required pam_pwquality.so
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_9_V1R5_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 9 STIG v1r5
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-5(1)(a), CAT|II, CCI|CCI-004066, Rule-ID|SV-271614r1091554_rule, STIG-ID|OL09-00-001010, Vuln-ID|V-271614
Plugin: Unix
Control ID: 396300628340257acbb5dd2f7d35d18977bb360e92055bbf031f868d15343c2d