STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 must not be configured to allow blank or null passwords.

DISA Rule

SV-261386r996587_rule

Vulnerability Number

V-261386

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

SLEM-05-611055

Severity

CAT I

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Configure SLEM 5 to not allow blank or null passwords.

Remove any instances of the "nullok" option in "/etc/pam.d/common-auth" and "/etc/pam.d/common-password" to prevent logons with empty passwords.

Check Contents

Verify SLEM 5 is not configured to allow blank or null passwords with the following command:

> grep pam_unix.so /etc/pam.d/* | grep nullok

If this produces any output, this is a finding.

Vulnerability Number

V-261386

Documentable

False

Rule Version

SLEM-05-611055

Severity Override Guidance

Verify SLEM 5 is not configured to allow blank or null passwords with the following command:

> grep pam_unix.so /etc/pam.d/* | grep nullok

If this produces any output, this is a finding.

Check Content Reference

Target Key

5596