V-216094

CAT II (Medium)

The system must require passwords to contain at least one numeric character.

Rule ID

SV-216094r1016289_rule

STIG

Version

V3R5

CCIs

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

Check the MINDIGIT setting.

# grep ^MINDIGIT /etc/default/passwd

If the MINDIGIT setting is less than one, this is a finding.

The root role is required.

# pfedit /etc/default/passwd 

Locate the line containing: 

MINDIGIT

Change the line to read:

MINDIGIT=1