Details
Complex passwords contain one character from each of the following classes: English uppercase letters, English lowercase letters, Westernized Arabic numerals, and non-alphanumeric characters.
Ensure that both uppercase and lowercase letters are part of the password policy on the computer.
Rationale:
The more complex a password the more resistant it will be against persons seeking unauthorized access to a system.
Impact:
Password policy should be in effect to reduce the risk of exposed services being compromised easily through dictionary attacks or other social engineering attempts.
Solution
Run the following command to set passwords to require at upper and lower case letter:
$ sudo pwpolicy -n /Local/Default -setglobalpolicy ‘requiresMixedCase=
example:
$ sudo pwpolicy -n /Local/Default -setglobalpolicy ‘requiresMixedCase=1’
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Identification and Authentication.This control applies to the following type of system Unix.