The system must require passwords to contain at least one uppercase alphabetic character.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
---|---|---|---|---|---|---|
medium | V-216327 | SRG-OS-000069 | SOL-11.1-040070 | SV-216327r1016272_rule | 2024-11-25 | 3 |
Description |
---|
Complex passwords can reduce the likelihood of success of automated password-guessing attacks. |
ℹ️ Check |
---|
Check the MINUPPER setting. # grep ^MINUPPER /etc/default/passwd If MINUPPER is not set to 1 or more, this is a finding. |
✔️ Fix |
---|
The root role is required. # pfedit /etc/default/passwd Locate the line containing: MINUPPER Change the line to read: MINUPPER=1 |