Detections
Analytics

SOL-11.1-040120 - The system must not have accounts configured with blank or null passwords.

Information

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

Solution

The root role is required.

Remove, lock, or configure a password for any account with a blank password.

# passwd [username]
or
Use the passwd -l command to lock accounts that are not permitted to execute commands.
or
Use the passwd -N command to set accounts to be non-login.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_x86_V3R6_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216097r959010_rule, STIG-ID|SOL-11.1-040120, STIG-Legacy|SV-60871, STIG-Legacy|V-47999, Vuln-ID|V-216097

Plugin: Unix

Control ID: b2b17408d034f43e48650f4345c5b3b563134e7f80dca84c94ce037c58dbf0b6