An XCCDF Group - A logical subset of the XCCDF Benchmark
pam_pwquality
/etc/pam.d/system-auth
password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=
/etc/security/pwquality.conf
difok = 4 minlen = 14 dcredit = -1 ucredit = -1 lcredit = -1 ocredit = -1 maxrepeat = 3
dcredit
dictcheck
1
difok
local_users_only
enforce_for_root
root
lcredit
maxclassrepeat
maxrepeat
minclass
* Upper-case characters * Lower-case characters * Digits * Special characters (for example, punctuation)
minlen
minlen=
ocredit=
ocredit
password
/etc/pam.d/password-auth
password requisite pam_pwquality.so
pam_pwquality.so
retry=
ucredit=
ucredit