SV-260478r991587: Ubuntu 22.04 LTS must have the "libpam-pwquality" package installed. | Canonical Ubuntu 22.04 LTS STIG SCAP Benchmark

Loading benchmark…

Assessment Title

Rule Text

Ubuntu 22.04 LTS must have the "libpam-pwquality" package installed.

Description

Discussion Text

Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. "pwquality" enforces complex password construction configuration and has the ability to limit brute-force attacks on the system.

How this relates to the STIG checklist: STIG vs SCAP benchmark.

IA Controls

NIST SP 800-53

Not mappedCCI-000366

References

DPMS Target Canonical Ubuntu 22.04 LTS DISA DPMS Target Canonical Ubuntu 22.04 LTS 5594

SCC Automation Reference

The reconstructed evaluation script behind this rule's OVAL check(s) — every module a compound check combines, with this rule's own concrete values and DISA's SCC tool's real per-module mechanism curated from static teardown of SCC releases.

#!/bin/bash
# Reconstructed from oval:mil.disa.stig.ubuntu2204os:def:260478
# Ubuntu 22.04 LTS must have the "libpam-pwquality" package installed.
# Per-module read mechanism curated from static teardown of DISA's SCC tool
# (SCAP Compliance Checker) -- see the SCC Automation Reference above.

# package libpam-pwquality is installed
# dpkginfo_object (dpkginfo_test)
test_1() {
  grep -A1 '^Package: libpam-pwquality$' /var/lib/dpkg/status &>/dev/null
}

if test_1; then
  echo "PASS"
else
  echo "FAIL"
fi

Remediation

Install the "pam_pwquality" package by using the following command: 
  
     $ sudo apt-get install libpam-pwquality