AIX must require passwords to contain no more than three consecutive repeating characters.
An XCCDF Rule
Description
<VulnDiscussion>Passwords with excessive repeating characters may be more vulnerable to password-guessing attacks.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-215232r508663_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Use the "chsec" command to set "maxrepeats" to "3" for the default stanza:
# chsec -f /etc/security/user -s default -a maxrepeats=3
Use the "chsec" command to set "maxrepeats" to "3" for all the users who have "maxrepeats" values that are greater than "3", or its value is set to "0":
# chuser maxrepeats=3 [user_name]