Detections
Analytics
GEN000790 - The system must prevent the use of dictionary words for passwords - DICTIONLIST
Information
An easily guessable password provides an open door to any external or internal malicious intruder. Many computer compromises occur as the result of account name and password guessing. This is generally done by someone with an automated script using repeated logon attempts until the correct account and password pair is guessed. Utilities, such as cracklib, can be used to validate passwords are not dictionary words and meet other criteria during password changes.Solution
Edit /etc/default/passwd; add or set DICTIONLIST to the dictionary file and DICTIONDBDIR to a database directory such as /var/passwd. Generate the password dictionary by running the mkpwdict command.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip
Item Details
Audit Name: DISA STIG Solaris 10 X86 v2r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227594r603266_rule, STIG-ID|GEN000790, STIG-Legacy|SV-26345, STIG-Legacy|V-22307, Vuln-ID|V-227594
Plugin: Unix
Control ID: 4b48c2b32fd70bbf93d7e5fb3413afd3215bd4956f4bbb95abc4ef064e1fc25c