[Forgot Password]
Login  Register Subscribe

23631

 
 

126951

 
 

99602

 
 

909

 
 

80167

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-90336-9

Platform: macosx10.10Date: (C)2015-06-23   (M)2017-11-21



Set Minimum Password Length to 15 Characters The minimum password length must be set to 15 characters. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. The use of more characters in a password helps to exponentially increase the time and/or resources required to compromise the password.


Parameter: Minimum password length


Technical Mechanism: To check the currently applied policies for password and accounts, use the following command: sudo system_profiler SPConfigurationProfileDataType | grep minLength The parameter minLength should be '15'. If it is less than '15', this is a finding.

References:

Resource IdReference
NISTIA-5 (1) (a)
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:25108


OVAL    1
oval:org.secpod.oval:def:25108
XCCDF    1
xccdf_org.secpod_benchmark_general_Mac_OS_X_10_10

© 2013 SecPod Technologies