Rule version SOL-11.1-040110 · STIG v3 · 2026-08-19
Complex passwords can reduce the likelihood of success of automated password-guessing attacks.
Check the MAXREPEATS setting.
# grep ^MAXREPEATS /etc/default/passwd
If the MAXREPEATS setting is greater than 3, this is a finding.
The root role is required. # pfedit /etc/default/passwd
Locate the line containing:
MAXREPEATS
Change the line to read:
MAXREPEATS=3