V-216329

CAT II (Medium)

The system must require passwords to contain at least one numeric character.

Rule ID

SV-216329r1016274_rule

STIG

Version

V3R5

CCIs

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

Check the MINDIGIT setting.

# grep ^MINDIGIT /etc/default/passwd

If the MINDIGIT setting is less than 1, this is a finding.

The root role is required.
# pfedit /etc/default/passwd 

Locate the line containing: 

MINDIGIT

Change the line to read:

MINDIGIT=1