The system must not have accounts configured with blank or null passwords.

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

The root role is required.

Determine if accounts with blank or null passwords exist.

# logins -po

If any account is listed, this is a finding.

The root role is required.

Remove, lock, or configure a password for any account with a blank password.

# passwd [username] or Use the passwd -l command to lock accounts that are not permitted to execute commands. or Use the passwd -N command to set accounts to be non-login.