An XCCDF Group - A logical subset of the XCCDF Benchmark
pam_pwquality
pam_pwquality(8)
pam_cracklib
/etc/pam.d/system-auth
password requisite pam_cracklib.so try_first_pass retry=3
password required pam_cracklib.so try_first_pass retry=3 maxrepeat=3 minlen=14 dcredit=-1 ucredit=-1 ocredit=-1 lcredit=-1 difok=4
password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=
/etc/security/pwquality.conf
difok = 4 minlen = 14 dcredit = -1 ucredit = -1 lcredit = -1 ocredit = -1 maxrepeat = 3
dcredit
dictcheck
1
difok
local_users_only
enforce_for_root
root
lcredit
maxclassrepeat
maxrepeat
minclass
* Upper-case characters * Lower-case characters * Digits * Special characters (for example, punctuation)
minlen
minlen=
ocredit=
ocredit
password
/etc/pam.d/password-auth
password requisite pam_pwquality.so
pam_pwquality.so
retry=
ucredit=
ucredit