mediumaccess-controlverified ✓✓rollback-safe
Ensure password maximum sequential characters is configured
pwquality-maxsequence · RHEL ≥ 8 · 1 impl
Description
The maxsequence setting in /etc/security/pwquality.conf must be properly configured.
Rationale
Improper maxsequence configuration could weaken system security controls.
Check → Remediate
Checkconfig_value
- path:
- /etc/security/pwquality.conf
- key:
- maxsequence
- expected:
- 3
- comparator:
- <=
Remediateconfig_set
- path:
- /etc/security/pwquality.conf
- key:
- maxsequence
- value:
- 3
- separator:
- =
Framework references
CIS
rhel9 5.3.3.2.5rhel10 5.3.2.2.5rhel8 5.3.3.2.5
NIST 800-53
IA-5
Live verification
rhel10:fullrhel8:fullrhel9:full
#pam#password#pwquality