mediumaccess-controlverified ✓rollback-safe

Enable dictionary check for passwords

pam-pwquality-dictcheck · RHEL ≥ 8, UBUNTU ≥ 22 · 1 impl

Description

The dictcheck parameter in /etc/security/pwquality.conf enables checking whether passwords are based on dictionary words.

Rationale

Dictionary words and common phrases are easily guessed by attackers using dictionary attacks. Enabling dictionary checking prevents users from using weak passwords based on common words.

Check → Remediate

Checkconfig_value

path:: /etc/security/pwquality.conf
key:: dictcheck
expected:: 1

Remediateconfig_set

path:: /etc/security/pwquality.conf
key:: dictcheck
value:: 1
separator:: =

Framework references

CIS

rhel8 5.3.3.2.6rhel9 5.3.3.2.6rhel10 5.3.2.2.6

STIG

V-258110 / RHEL-09-611105V-230377V-270704 / UBTU-24-300014V-260564 / UBTU-22-611030V-281191 / RHEL-10-600320

NIST 800-53

IA-5(1)(a)

Live verification

rhel10:checkrhel8:checkrhel9:checkubuntu22:checkubuntu24:checkubuntu26:check

#pam#password#authentication#pwquality