BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

UBTU-22-215010 Ubuntu 22.04 LTS must have the "libpam-pwquality" package installed.

DISA STIG library V2R10
All changes in this version
first version loaded CAT II

Maps to CM-6 via CCI-000366

Title

Ubuntu 22.04 LTS must have the "libpam-pwquality" package installed.

Control

Verify Ubuntu 22.04 LTS has the "libpam-pwquality" package installed with the following command: $ dpkg -l | grep libpam-pwquality ii libpam-pwquality:amd64 1.4.4-1build2 amd64 PAM module to check password strength If "libpam-pwquality" is not installed, this is a finding.

Discussion

Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. "pwquality" enforces complex password construction configuration and has the ability to limit brute-force attacks on the system.

Related controls

CCI-000366

Fix

Install the "pam_pwquality" package by using the following command: $ sudo apt-get install libpam-pwquality