I ran a security scan in a RedHat Linux Server and got the following vulnerabilty:
Incorrect System Default minimum password length or password complexity rules. Minimum password length should be set to 8. It should be set through pam_cracklib.so or pam_pwquality.so or pam_passwdqc.so.
in the /etc/pam.d/system-auth I set the following line:
password requisite pam_cracklib.so try_first_pass retry=5 minlength=8
but somehow I am still getting the same vulnerability. I don’t know which parameter am I missing in the file.