The Photon operating system must store only encrypted representations of passwords.
An XCCDF Rule
Description
Passwords must be protected at all times via strong, one-way encryption. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. If they are encrypted with a weak cipher, those passwords are much more vulnerable to offline brute-force attacks.
- ID
- SV-256585r982199_rule
- Version
- PHTN-30-000117
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Navigate to and open:
/etc/pam.d/system-password
Add the argument "sha512" to the "password" line: