Skip to content

The system must not have accounts configured with blank or null passwords.

An XCCDF Rule

Description

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

ID
SV-216097r959010_rule
Version
SOL-11.1-040120
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

The root role is required.

Remove, lock, or configure a password for any account with a blank password.

# passwd [username]
or