Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide

The Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide (V2 R3) has 229 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

229STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R3

CurrentPublished Fri Apr 23 2021

The Ubuntu operating system must not be configured to allow blank or null passwords.

Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide

Assessment Title

Rule Text

The Ubuntu operating system must not be configured to allow blank or null passwords.

Description

Discussion Text

If the operating system allows empty passwords, anyone could log on and run commands with the privileges. Empty passwords should never be used in operational environments.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-214963

Rule

SV-214963r610931_rule

Severity

high

Rule Version

UBTU-16-010250

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

To verify that null passwords cannot be used, run the following command: 

# grep pam_unix.so /etc/pam.d/* | grep nullok*
If this produces any output, it may be possible to log on with accounts with empty passwords.

If null passwords can be used, this is a finding.

Implementation Procedure

Fix Text

Remove any instances of the "nullok" option in files under "/etc/pam.d/" to prevent logons with empty passwords.

STIG check 25 of 229 in the Canonical Ubuntu 16.04 LTS STIG checklist

← Previous · V-214962Passwords must have a minimum of 15-characters.Next · V-214964 →The Ubuntu operating system must prevent the use of dictionary words for passwords.