An XCCDF Group - A logical subset of the XCCDF Benchmark
/etc/pam.d
/etc/pam.d/login
/etc/pam.d/system-auth
/etc/security/opasswd
$ sudo grep pam_succeed_if /etc/pam.d/sudo
pam_lastlog
/etc/pam.d/postlogin
showfailed
session [default=1] pam_lastlog.so showfailed
silent
pam_faillock
/usr/share/doc/pam-VERSION/txts/README.pam_faillock
remember
pam_unix
pam_pwhistory
pam_faillock.so
/etc/security/faillock.conf
deny = <count>
fail_interval
fail_interval = <interval-in-seconds>
interval-in-seconds
unlock_time=<interval-in-seconds>
authselect
authconfig
unlock_time
0
faillock
pam_pwquality
pam_pwquality(8)
password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=
/etc/security/pwquality.conf
difok = 4 minlen = 14 dcredit = -1 ucredit = -1 lcredit = -1 ocredit = -1 maxrepeat = 3
dcredit
lcredit
minclass
* Upper-case characters * Lower-case characters * Digits * Special characters (for example, punctuation)
minlen
minlen=
ocredit=
ocredit
pam_pwquality.so
/etc/pam.d/common-password
retry=
ucredit=
ucredit
/etc/shadow
/etc/login.defs
ENCRYPT_METHOD
libpam-pwquality
$ apt-get install libpam-pwquality