The system must require passwords to contain at least one special character.

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

Check the MINSPECIAL setting.

# grep ^MINSPECIAL /etc/default/passwd

If the MINSPECIAL setting is less than one, this is a finding.

The root role is required.

# pfedit /etc/default/passwd a

Locate the line containing:

MINSPECIAL

Change the line to read:

MINSPECIAL=1