STIGQter: STIG Summary: Solaris 10 X86 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The system must prevent the use of dictionary words for passwords.

DISA Rule

SV-227594r603266_rule

Vulnerability Number

V-227594

Group Title

SRG-OS-000480

Rule Version

GEN000790

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Edit /etc/default/passwd; add or set DICTIONLIST to the dictionary file and DICTIONDBDIR to a database directory such as /var/passwd. Generate the password dictionary by running the mkpwdict command.

Check Contents

Check /etc/default/passwd for dictionary check configuration.

# grep DICTION /etc/default/passwd

If the DICTIONLIST or DICTIONDBDIR settings are not present, or are set to non-existent files or directories, this is a finding.

Vulnerability Number

V-227594

Documentable

False

Rule Version

GEN000790

Severity Override Guidance

Check /etc/default/passwd for dictionary check configuration.

# grep DICTION /etc/default/passwd

If the DICTIONLIST or DICTIONDBDIR settings are not present, or are set to non-existent files or directories, this is a finding.

Check Content Reference

M

Target Key

4061

Comments