SV-100213r1_rule
V-89563
SRG-OS-000069-GPOS-00037
VRAU-SL-000340
CAT II
10
If "ucredit" was not set at all in /etc/pam.d/common-password-vmware.local then run the following command:
# sed -i '/pam_cracklib.so/ s/$/ ucredit=-1/' /etc/pam.d/common-password-vmware.local
If "ucredit" was set incorrectly then run the following command to set it to "-1":
# sed -i '/pam_cracklib.so/ s/ucredit=../ucredit=-1/' /etc/pam.d/common-password-vmware.local
Check the SLES for vRealize enforces password complexity by requiring that at least one upper-case character be used by using the following command:
# grep ucredit /etc/pam.d/common-password-vmware.local
If "ucredit" is not set to "-1" or not at all, this is a finding.
Expected Result:
password requisite pam_cracklib.so dcredit=-1 ucredit=-1 lcredit=-1 ocredit=-1 minlen=14 difok=4 retry=3
V-89563
False
VRAU-SL-000340
Check the SLES for vRealize enforces password complexity by requiring that at least one upper-case character be used by using the following command:
# grep ucredit /etc/pam.d/common-password-vmware.local
If "ucredit" is not set to "-1" or not at all, this is a finding.
Expected Result:
password requisite pam_cracklib.so dcredit=-1 ucredit=-1 lcredit=-1 ocredit=-1 minlen=14 difok=4 retry=3
M
3459