Detections
Analytics

SOL-11.1-040120 - The system must not have accounts configured with blank or null passwords.

Information

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

Solution

The root role is required.

Remove, lock, or configure a password for any account with a blank password.

# passwd [username]
or
Use the passwd -l command to lock accounts that are not permitted to execute commands.
or
Use the passwd -N command to set accounts to be non-login.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_SPARC_V3R6_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216332r959010_rule, STIG-ID|SOL-11.1-040120, STIG-Legacy|SV-60871, STIG-Legacy|V-47999, Vuln-ID|V-216332

Plugin: Unix

Control ID: b611f96181a63b32f210347ba00c75afd008384bd51b2796abdbf9c4b686198f