STIGUI
V-216094CAT II — Medium severitySV-216094r1016289_rule

The system must require passwords to contain at least one numeric character.

Rule version SOL-11.1-040090 · STIG v3 · 2026-08-19

Discussion

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

Check

Check the MINDIGIT setting.

# grep ^MINDIGIT /etc/default/passwd

If the MINDIGIT setting is less than one, this is a finding.

Fix

The root role is required.

# pfedit /etc/default/passwd 

Locate the line containing:

MINDIGIT

Change the line to read:

MINDIGIT=1

Identifiers

Group ID
V-216094
Group title
SRG-OS-000071
Rule ID
SV-216094r1016289_rule
Check ID
C-17332r986438_chk
Fix ID
F-17330r986439_fix