5.2.4 Ensure Complex Password Must Contain Numeric Character Is Configured

Information

Complex passwords contain one character from each of the following classes: English uppercase letters, English lowercase letters, Westernized Arabic numerals, and non-alphanumeric characters.

Ensure that a number or numeric value is part of the password policy on the computer.

The more complex a password, the more resistant it will be against persons seeking unauthorized access to a system.

Solution

Run the following command to set passwords to require at least one number:

% /usr/bin/sudo /usr/bin/pwpolicy -n /Local/Default -setglobalpolicy -setaccountpolicies "requiresNumeric=<value>=1>"

Impact:

Password policy should be in effect to reduce the risk of exposed services being compromised easily through dictionary attacks or other social engineering attempts.

See Also

https://workbench.cisecurity.org/benchmarks/17466

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CSCv7|4.4

Plugin: Unix

Control ID: f68b3a8d284ca9db5b9430e8bd0d600af8db986c20328c68ddec120e835824e2