AIX must require passwords to contain no more than three consecutive repeating characters.
An XCCDF Rule
Description
Passwords with excessive repeating characters may be more vulnerable to password-guessing attacks.
- ID
- SV-215232r991589_rule
- Version
- AIX7-00-001136
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Use the "chsec" command to set "maxrepeats" to "3" for the default stanza:
# chsec -f /etc/security/user -s default -a maxrepeats=3
Use the "chsec" command to set "maxrepeats" to "3" for all the users who have "maxrepeats" values that are greater than "3", or its value is set to "0":
# chuser maxrepeats=3 [user_name]