SRG-OS-000069-GPOS-00037 Controls

STIG ID Version Title Product
ALMA-09-035880 V1R2 AlmaLinux OS 9 must ensure the password complexity module is enabled in the password-auth file.
ALMA-09-035990 V1R2 AlmaLinux OS 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.
ALMA-09-036100 V1R2 AlmaLinux OS 9 must enforce password complexity rules for the root account.
ALMA-09-036210 V1R2 AlmaLinux OS 9 must enforce password complexity by requiring that at least one uppercase character be used.
APPL-14-003060 V2R3 The macOS system must require passwords contain a minimum of one lowercase character and one uppercase character.
APPL-15-003060 V1R3 The macOS system must require that passwords contain a minimum of one lowercase character and one uppercase character.
OL07-00-010118 V3R2 The Oracle Linux operating system must be configured so that /etc/pam.d/passwd implements /etc/pam.d/system-auth when changing passwords.
OL07-00-010119 V3R2 The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, pwquality must be used.
OL07-00-010120 V3R2 The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one upper-case character.
OL08-00-020100 V2R4 OL 8 must ensure the password complexity module is enabled in the password-auth file.
OL08-00-020110 V2R4 OL 8 must enforce password complexity by requiring that at least one uppercase character be used.
OL09-00-001001 V1R1 OL 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.
OL09-00-001005 V1R1 OL 9 must enforce password complexity by requiring that at least one uppercase character be used.
OL09-00-001010 V1R1 OL 9 must ensure the password complexity module is enabled in the password-auth file.
RHEL-07-010118 V3R9 The Red Hat Enterprise Linux operating system must be configured so that /etc/pam.d/passwd implements /etc/pam.d/system-auth when changing passwords.
RHEL-07-010119 V3R9 The Red Hat Enterprise Linux operating system must be configured so that when passwords are changed or new passwords are established, pwquality must be used.
RHEL-07-010120 V3R9 The Red Hat Enterprise Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one upper-case character.
RHEL-08-020100 V2R3 RHEL 8 must ensure the password complexity module is enabled in the password-auth file.
RHEL-08-020110 V2R3 RHEL 8 must enforce password complexity by requiring that at least one uppercase character be used.
RHEL-09-611010 V2R4 RHEL 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.
RHEL-09-611040 V2R4 RHEL 9 must ensure the password complexity module is enabled in the password-auth file.
RHEL-09-611110 V2R4 RHEL 9 must enforce password complexity by requiring that at least one uppercase character be used.
SLES-12-010150 V3R2 The SUSE operating system must enforce passwords that contain at least one upper-case character.
SLES-15-020130 V2R4 The SUSE operating system must enforce passwords that contain at least one uppercase character.
UBTU-18-010100 V2R15 The Ubuntu operating system must enforce password complexity by requiring that at least one upper-case character be used.
UBTU-20-010050 V2R1 The Ubuntu operating system must enforce password complexity by requiring that at least one upper-case character be used.
UBTU-22-611010 V2R4 Ubuntu 22.04 LTS must enforce password complexity by requiring at least one uppercase character be used.
UBTU-24-400260 V1R1 Ubuntu 24.04 LTS must enforce password complexity by requiring that at least one uppercase character be used.
WN10-AC-000040 V3R4 The built-in Microsoft password complexity filter must be enabled.
WN11-AC-000040 V2R3 The built-in Microsoft password complexity filter must be enabled.
WN16-AC-000080 V2R9 Windows Server 2016 must have the built-in Windows password complexity policy enabled.
WN19-AC-000080 V3R4 Windows Server 2019 must have the built-in Windows password complexity policy enabled.
WN22-AC-000080 V2R4 Windows Server 2022 must have the built-in Windows password complexity policy enabled.