V-216330

CAT II (Medium)

The system must require passwords to contain at least one special character.

Rule ID

SV-216330r1016275_rule

STIG

Version

V3R5

CCIs

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

Check the MINSPECIAL setting.

# grep ^MINSPECIAL /etc/default/passwd

If the MINSPECIAL setting is less than 1, this is a finding.

The root role is required.
# pfedit /etc/default/passwd a

Locate the line containing: 

MINSPECIAL

Change the line to read:

MINSPECIAL=1