Detections
Analytics

SOL-11.1-040480 - The operating system must not allow logins for users with blank passwords.

Information

If the password field is blank and the system does not enforce a policy that passwords are required, it could allow login without proper authentication of a user.

Solution

The root role is required.

Modify the /etc/default/login file.

# pfedit /etc/default/login

Insert the line:

PASSREQ=YES

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_x86_V3R6_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-216128r959010_rule, STIG-ID|SOL-11.1-040480, STIG-Legacy|SV-61015, STIG-Legacy|V-48143, Vuln-ID|V-216128

Plugin: Unix

Control ID: 9ec11287f2577815bf332c7addcda39f506818c1ed7f0208a26aa7032ce6b5d2