STIGQter: STIG Summary: Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Mar 2026:

TOSS 5 must, for password-based authentication, verify when users create or update passwords the passwords are not found on the list of commonly-used, expected, or compromised passwords in IA-5 (1) (a).

DISA Rule

SV-282764r1201597_rule

Vulnerability Number

V-282764

Group Title

SRG-OS-000710-GPOS-00160

Rule Version

TOSS-05-000079

Severity

CAT II

CCI(s)

CCI-004061 - For password-based authentication, verify when users create or update passwords, that the passwords are not found on the list of commonly-used, expected, or compromised passwords in IA-5 (1) (a).

Weight

Fix Recommendation

Configure TOSS 5 to verify when users create or update passwords, the passwords are not found on a list of commonly-used, expected, or compromised passwords by adding the following to the /etc/pam.d/password-auth and /etc/pam.d/system-auth files:

password requisite pam_pwquality.so local_users_only

Check Contents

Verify TOSS 5 is configured not allow users create or update passwords with passwords that are found on the list of commonly-used, expected, or compromised passwords using the following command:

$ sudo grep pam_pwquality /etc/pam.d/system-auth

or

$ sudo grep pam_pwquality /etc/pam.d/password-auth

password requisite pam_pwquality.so local_users_only

If the parameter "pam_pwquality" is not set and required in at least one of the pam stacks, this is a finding.

Vulnerability Number

V-282764

Documentable

False

Rule Version

TOSS-05-000079

Severity Override Guidance

Check Content Reference

Target Key

5738