The system must require passwords to contain at least one special character.

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

Check the MINSPECIAL setting.

# grep ^MINSPECIAL /etc/default/passwd

If the MINSPECIAL setting is less than 1, this is a finding.

The root role is required. # pfedit /etc/default/passwd a

Locate the line containing:

MINSPECIAL

Change the line to read:

MINSPECIAL=1