STIGQter: STIG Summary: HYCU Protege Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

The HYCU virtual appliance must enforce a minimum 15-character password length.

DISA Rule

SV-268266r1038758_rule

Vulnerability Number

V-268266

Group Title

SRG-APP-000164-NDM-000252

Rule Version

HYCU-ND-000580

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Add the following line to "/etc/security/pwquality.conf" (or modify the line to have the required value).
minlen = 15

Add or modify the following line in the /opt/grizzly/config.properties configuration file:
user.password.min.length=15

Reload the HYCU application by running the following command:
sudo systemctl reload grizzly

Check Contents

Check for the value of the "minlen" option in "/etc/security/pwquality.conf" with the following command:
grep minlen /etc/security/pwquality.conf

If the minlen value is not set to "15", this is a finding.

Check for the value of the "user.password.min.length" variable in "/opt/grizzly/config.properties" HYCU configuration file with the following command:
grep user.password.min.length /opt/grizzly/config.properties

If the value is not set to 15 or more, this is a finding.

Vulnerability Number

V-268266

Documentable

False

Rule Version

HYCU-ND-000580

Severity Override Guidance

Check for the value of the "minlen" option in "/etc/security/pwquality.conf" with the following command:
grep minlen /etc/security/pwquality.conf

If the minlen value is not set to "15", this is a finding.

Check for the value of the "user.password.min.length" variable in "/opt/grizzly/config.properties" HYCU configuration file with the following command:
grep user.password.min.length /opt/grizzly/config.properties

If the value is not set to 15 or more, this is a finding.

Check Content Reference

M

Target Key

5660