SV-261382r996577_rule
V-261382
SRG-OS-000078-GPOS-00046
SLEM-05-611035
CAT II
10
Configure SLEM 5 to enforce a minimum 15-character password length.
Edit "/etc/pam.d/common-password" and edit the line containing "pam_cracklib.so" to contain the option "minlen=15" after the third column.
The DOD standard requires a minimum 15-character password length.
Verify SLEM 5 enforces a minimum 15-character password length with the following command:
> grep pam_cracklib.so /etc/pam.d/common-password
password requisite pam_cracklib.so minlen=15
If the value for "minlen" is not "15" or greater, the "minlen" option is missing from the line, the second column has a value different from "requisite", the line is commented out, or the line is missing, this is a finding.
V-261382
False
SLEM-05-611035
Verify SLEM 5 enforces a minimum 15-character password length with the following command:
> grep pam_cracklib.so /etc/pam.d/common-password
password requisite pam_cracklib.so minlen=15
If the value for "minlen" is not "15" or greater, the "minlen" option is missing from the line, the second column has a value different from "requisite", the line is commented out, or the line is missing, this is a finding.
M
5596