SV-99103r1_rule
V-88453
SRG-OS-000069-GPOS-00037
VROM-SL-000340
CAT II
10
If ucredit was not set at all in "/etc/pam.d/common-password-vmware.local" file then run the following command:
# sed -i '/pam_cracklib.so/ s/$/ ucredit=-1/' /etc/pam.d/common-password-vmware.local
If "ucredit" was set incorrectly, run the following command to set it to "-1":
# sed -i '/pam_cracklib.so/ s/ucredit=../ucredit=-1/' /etc/pam.d/common-password-vmware.local
Check SLES for vRealize enforces password complexity by requiring that at least one upper-case character be used by using the following command:
# grep ucredit /etc/pam.d/common-password-vmware.local
If "ucredit" is not set to "-1" or not at all, this is a finding.
Expected Result:
password requisite pam_cracklib.so dcredit=-1 ucredit=-1 lcredit=-1 ocredit=-1 minlen=14 difok=4 retry=3
V-88453
False
VROM-SL-000340
Check SLES for vRealize enforces password complexity by requiring that at least one upper-case character be used by using the following command:
# grep ucredit /etc/pam.d/common-password-vmware.local
If "ucredit" is not set to "-1" or not at all, this is a finding.
Expected Result:
password requisite pam_cracklib.so dcredit=-1 ucredit=-1 lcredit=-1 ocredit=-1 minlen=14 difok=4 retry=3
M
3461