SRG-OS-000069-GPOS-00037 Controls

STIG ID Version Title Product
ALMA-09-035880 V1R1 AlmaLinux OS 9 must ensure the password complexity module is enabled in the password-auth file.
ALMA-09-035990 V1R1 AlmaLinux OS 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.
ALMA-09-036100 V1R1 AlmaLinux OS 9 must enforce password complexity rules for the root account.
ALMA-09-036210 V1R1 AlmaLinux OS 9 must enforce password complexity by requiring that at least one uppercase character be used.
APPL-14-003060 V2R3 The macOS system must require passwords contain a minimum of one lowercase character and one uppercase character.
APPL-15-003060 V1R2 The macOS system must require that passwords contain a minimum of one lowercase character and one uppercase character.
OL07-00-010118 V3R1 The Oracle Linux operating system must be configured so that /etc/pam.d/passwd implements /etc/pam.d/system-auth when changing passwords.
OL07-00-010119 V3R1 The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, pwquality must be used.
OL07-00-010120 V3R1 The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one upper-case character.
OL08-00-020100 V2R3 OL 8 must ensure the password complexity module is enabled in the password-auth file.
OL08-00-020110 V2R3 OL 8 must enforce password complexity by requiring that at least one uppercase character be used.
RHEL-07-010118 V3R9 The Red Hat Enterprise Linux operating system must be configured so that /etc/pam.d/passwd implements /etc/pam.d/system-auth when changing passwords.
RHEL-07-010119 V3R9 The Red Hat Enterprise Linux operating system must be configured so that when passwords are changed or new passwords are established, pwquality must be used.
RHEL-07-010120 V3R9 The Red Hat Enterprise Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one upper-case character.
RHEL-08-020100 V2R2 RHEL 8 must ensure the password complexity module is enabled in the password-auth file.
RHEL-08-020110 V2R2 RHEL 8 must enforce password complexity by requiring that at least one uppercase character be used.
RHEL-09-611010 V2R3 RHEL 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.
RHEL-09-611040 V2R3 RHEL 9 must ensure the password complexity module is enabled in the password-auth file.
RHEL-09-611110 V2R3 RHEL 9 must enforce password complexity by requiring that at least one uppercase character be used.
SLES-12-010150 V3R2 The SUSE operating system must enforce passwords that contain at least one upper-case character.
SLES-15-020130 V2R3 The SUSE operating system must enforce passwords that contain at least one uppercase character.
UBTU-18-010100 V2R15 The Ubuntu operating system must enforce password complexity by requiring that at least one upper-case character be used.
UBTU-20-010050 V2R1 The Ubuntu operating system must enforce password complexity by requiring that at least one upper-case character be used.
UBTU-22-611010 V2R3 Ubuntu 22.04 LTS must enforce password complexity by requiring at least one uppercase character be used.
WN10-AC-000040 V3R3 The built-in Microsoft password complexity filter must be enabled.
WN11-AC-000040 V2R2 The built-in Microsoft password complexity filter must be enabled.
WN16-AC-000080 V2R9 Windows Server 2016 must have the built-in Windows password complexity policy enabled.
WN19-AC-000080 V3R3 Windows Server 2019 must have the built-in Windows password complexity policy enabled.
WN22-AC-000080 V2R3 Windows Server 2022 must have the built-in Windows password complexity policy enabled.