Detections
Analytics
SOL-11.1-040190 - The system must prevent the use of dictionary words for passwords.
Information
The use of common words in passwords simplifies password-cracking attacks.Solution
The root role is required.# pfedit /etc/default/passwd
Insert the lines:
DICTIONLIST=/usr/share/lib/dict/words
DICTIONDBDIR=/var/passwd
Generate the password dictionary by running the mkpwdict command.
# mkpwdict -s /usr/share/lib/dict/words
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_SPARC_V3R6_STIG.zip
Item Details
Audit Name: DISA Solaris 11 SPARC STIG v3r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216338r959010_rule, STIG-ID|SOL-11.1-040190, STIG-Legacy|SV-60925, STIG-Legacy|V-48053, Vuln-ID|V-216338
Plugin: Unix
Control ID: d35c16f010e4bd58a0cd7ecfc15153aec50905ab4df8927d75815e4f05ee4932