mediumaccess-controlverified ✓rollback-safe
Require digit in password
pam-pwquality-dcredit · RHEL ≥ 8, UBUNTU ≥ 22 · 1 impl
Description
The dcredit parameter in /etc/security/pwquality.conf controls the credit given for having digits in the password. A negative value requires at least that many digits.
Rationale
Requiring digits increases password complexity and makes passwords more resistant to dictionary attacks.
Check → Remediate
Checkconfig_value
- path:
- /etc/security/pwquality.conf
- key:
- dcredit
- expected:
- -1
- comparator:
- <=
Remediateconfig_set
- path:
- /etc/security/pwquality.conf
- key:
- dcredit
- value:
- -1
- separator:
- =
Framework references
CIS
rhel8 5.3.3.2.3rhel9 5.3.3.2.3rhel10 5.3.2.2.3ubuntu24 5.3.3.2.3ubuntu22 5.3.3.2.3
STIG
V-258103 / RHEL-09-611070V-230359V-270728 / UBTU-24-400280V-260562 / UBTU-22-611020V-281190 / RHEL-10-600310
NIST 800-53
IA-5(1)(a)
Live verification
rhel10:checkrhel8:checkrhel9:checkubuntu22:checkubuntu24:checkubuntu26:check
#pam#password#authentication#pwquality