Ensure password maximum repeated characters is configured

HighLevel 1Automatedaix

Description

maxrepeats defines the maximum number of times a character may appear in a password. Use of a complex password helps to increase the time and resources required to compromise the password. Passwords which consist of too many repeated characters have lower complexity and thus are easier to compromise. Audit: reads `lssec -f /etc/security/user -s default -a maxrepeats`.

How it is checked

Audit method: Shell command

shell

command -v lssec >/dev/null 2>&1 || exit 1; out=$(lssec -f /etc/security/user -s default -a maxrepeats 2>/dev/null) || exit 1; v=$(printf '%s\n' "$out" | sed -n 's/.*maxrepeats=\([^ ]*\).*/\1/p'); if [ -n "$v" ] && [ "$v" -ge 1 ] && [ "$v" -le 4 ]; then echo compliant; else echo "maxrepeats=$v"; fi

Expected output: compliant

How it is fixed

Fix method: Shell command

shell

chsec -f /etc/security/user -s default -a maxrepeats=4

Properties

Operating systems: Any
Tags: aixpassword-policy
Reference: CIS IBM AIX 7 Benchmark v1.2.0 - 5.2.13 Ensure password maximum repeated characters is configured

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target aix