Skip to content

The Photon operating system must prohibit password reuse for a minimum of five generations.

An XCCDF Rule

Description

Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. If the information system or application allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the result is a password that is not changed per policy requirements.

ID
SV-256506r982201_rule
Version
PHTN-30-000029
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Navigate to and open:

/etc/pam.d/system-password

Add the following line after the "password requisite pam_cracklib.so" statement: