The system must require passwords to contain at least one uppercase alphabetic character.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
---|---|---|---|---|---|---|
medium | V-216092 | SRG-OS-000069 | SOL-11.1-040070 | SV-216092r1016287_rule | 2024-11-25 | 3 |
Description |
---|
Complex passwords can reduce the likelihood of success of automated password-guessing attacks. |
ℹ️ Check |
---|
Check the MINUPPER setting. # grep ^MINUPPER /etc/default/passwd If MINUPPER is not set to one or more, this is a finding. |
✔️ Fix |
---|
The root role is required. # pfedit /etc/default/passwd Locate the line containing: MINUPPER Change the line to read: MINUPPER=1 |