Detections
Analytics

SOL-11.1-040480 - The operating system must not allow logins for users with blank passwords.

Information

If the password field is blank and the system does not enforce a policy that passwords are required, it could allow login without proper authentication of a user.

Solution

The root role is required.

Modify the /etc/default/login file.

# pfedit /etc/default/login

Insert the line:

PASSREQ=YES

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_SPARC_V3R6_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-216365r959010_rule, STIG-ID|SOL-11.1-040480, STIG-Legacy|SV-61015, STIG-Legacy|V-48143, Vuln-ID|V-216365

Plugin: Unix

Control ID: f2a84ab41b4cdb7bd353f90ebb28f545e225be922dca10a587a103dfcc7e3edd