Anduril NixOS Security Technical Implementation Guide

The Anduril NixOS Security Technical Implementation Guide (V1 R3) has 103 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

103STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R3

CurrentPublished Wed Sep 30 2026

NixOS must enforce password complexity by requiring that at least one uppercase character be used.

Anduril NixOS Security Technical Implementation Guide

Assessment Title

Rule Text

NixOS must enforce password complexity by requiring that at least one uppercase character be used.

Description

Discussion Text

Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-268126

Rule

SV-268126r1131057_rule

Severity

medium

Rule Version

ANIX-00-000730

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify NixOS enforces password complexity by requiring at least one uppercase character with the following command:

$ grep ucredit /etc/security/pwquality.conf

 ucredit=-1

If the value of "ucredit" is a positive number or is commented out, this is a finding.

Implementation Procedure

Fix Text

Configure NixOS to enforce password complexity. 

Add the following Nix code to the NixOS Configuration, usually located in /etc/nixos/configuration.nix or /etc/nixos/flake.nix:

environment.etc."/security/pwquality.conf".text = ''
ucredit=-1
'';

Rebuild and switch to the new NixOS configuration:
$ sudo nixos-rebuild switch

STIG check 49 of 103 in the Anduril NixOS STIG checklist

← Previous · V-268125NixOS must enforce authorized access to the corresponding private key for PKI-based authentication.Next · V-268127 →NixOS must enforce password complexity by requiring that at least one lowercase character be used.