Enforcement of Password Complexity

The Ubuntu operating system must enforce password complexity by requiring that at least one upper-case character be used.

Rationale: Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.

Password complexity is one factor of several that determines how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.

Audit: Verify the Ubuntu operating system enforces password complexity by requiring that at least one upper-case character be used.

Determine if the field ucredit is set in the /etc/security/pwquality.conf file with the following command:

grep -i “ucredit” /etc/security/pwquality.conf

ucredit=-1

If the “ucredit” parameter is greater than “-1”, or is commented out, this is a finding.

Remediation: Add or update the /etc/security/pwquality.conf file to contain the ucredit parameter:

ucredit=-1

--

--

--

Trusted Veteran | Compassionate. Aspiring. Resourceful.

Love podcasts or audiobooks? Learn on the go with our new app.

Recommended from Medium

Announcement of LBank Listed RLY、SAND、CHZ and Airdrop 10000 USDT to Reward Users

Evanesco ITO Participation Tutorial

Cardence is excited to announce its upcoming Airdrop Program, which is set to start from July 28 on…

How to Make Small Business Network Security Safe in 10 Tips

Protect your small business network security and know who has access to your sensitive data.

Instructions to participate in Seed Phase

7 things startups need to know about cybersecurity

Defense in Depth for Cloud services: How SASE, SSE and SAAS intertwine

Mobile App Security In 2020

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Austin Songer

Austin Songer

Trusted Veteran | Compassionate. Aspiring. Resourceful.

More from Medium

Month 28 — The teacher appears when the student is ready — My Linux teachers arrived

Kali Linux as a Daily (Office) Driver

8 Uses of SCP Commands in Linux

A big blueberry

Linux kernel 2.6.* Error: “code model kernel does not support PIC mode”