STIGUI
V-216331CAT III — Low severitySV-216331r959010_rule

The system must require passwords to contain no more than three consecutive repeating characters.

Rule version SOL-11.1-040110 · STIG v3 · 2026-08-19

Discussion

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

Check

Check the MAXREPEATS setting.

# grep ^MAXREPEATS /etc/default/passwd

If the MAXREPEATS setting is greater than 3, this is a finding.

Fix

The root role is required. # pfedit /etc/default/passwd

Locate the line containing:

MAXREPEATS

Change the line to read:

MAXREPEATS=3

Identifiers

Group ID
V-216331
Group title
SRG-OS-000480
Rule ID
SV-216331r959010_rule
Check ID
C-17567r371081_chk
Fix ID
F-17565r371082_fix