mediumaccess-controlverified ✓rollback-safe
Require lowercase character in password
pam-pwquality-lcredit · RHEL ≥ 8, UBUNTU ≥ 22 · 1 impl
Description
The lcredit parameter in /etc/security/pwquality.conf controls the credit given for having lowercase characters in the password. A negative value requires at least that many lowercase characters.
Rationale
Requiring lowercase characters increases password complexity and makes passwords more resistant to dictionary attacks.
Check → Remediate
Checkconfig_value
- path:
- /etc/security/pwquality.conf
- key:
- lcredit
- expected:
- -1
- comparator:
- <=
Remediateconfig_set
- path:
- /etc/security/pwquality.conf
- key:
- lcredit
- value:
- -1
- separator:
- =
Framework references
CIS
rhel8 5.3.3.2.3rhel9 5.3.3.2.3rhel10 5.3.2.2.3ubuntu24 5.4.1.4ubuntu22 5.4.1.4
STIG
V-258102 / RHEL-09-611065V-230358V-270727 / UBTU-24-400270V-260561 / UBTU-22-611015V-281183 / RHEL-10-600240
NIST 800-53
IA-5(1)(a)
Live verification
rhel10:checkrhel8:checkrhel9:checkubuntu22:checkubuntu24:checkubuntu26:check
#pam#password#authentication#pwquality