I ran a security scan in a RedHat Linux Server and got the following vulnerabilty:
Incorrect System Default minimum password length or password complexity rules. Minimum password length should be set to 8. It should be set through pam_cracklib.so or pam_pwquality.so or pam_passwdqc.so.
in the /etc/pam.d/system-auth I set the following line:
password requisite pam_cracklib.so try_first_pass retry=5 minlength=8
but somehow I am still getting the same vulnerability. I don’t know which parameter am I missing in the file.
minlength
vsminlen
? linux.die.net/man/8/pam_cracklib – Jeff Schaller♦ Sep 1 '18 at 20:44