← All control domains
Passwords (pwquality): 14 controls for Linux hardening
Pavois audits 14 controls in the Passwords (pwquality) hardening domain, across 9 systems and 5 standards (CIS, ANSSI BP-028, NIST 800-53, PCI DSS, DISA STIG). Every control declares the evidence it gathers, its severity, its remediation and its standard references.
The domain in figures
| Controls | 14 |
| Severities | |
| Evidence gathered | |
| Standards | |
| Systems | Debian 12Debian 13FedoraRHEL 10 / Rocky 10 / AlmaLinux 10RHEL 8 / Rocky 8 / AlmaLinux 8RHEL 9 / Rocky 9 / AlmaLinux 9Ubuntu 22.04Ubuntu 24.04Ubuntu 26.04 |
| Coverage depth | in depth |
What does Pavois check in this domain?
- persistent config 14
- Checked against the content of a persistent configuration file, the source of truth that survives reboots.
Which standards does this domain cover?
One effective-configuration check serves as evidence for several standards at once. The references below are the ones the corpus actually carries, never a claimed equivalence. how to read a standard mapping.
- CIS
- 5.3.3.2.1, 5.3.3.2.2, 5.3.3.2.3, 5.3.3.2.4, 5.3.3.2.5, 5.3.3.2.6, 5.3.3.2.7, 5.3.3.2.8, 8.3.6
- ANSSI BP-028
- R31, R68
- NIST 800-53
- AC-7(a), CM-6(a), IA-5(1)(a), IA-5(1)(b), IA-5(4), IA-5(c)
- PCI DSS
- 8.3.6
- DISA STIG
- UBTU-22-611010, UBTU-22-611015, UBTU-22-611020, UBTU-22-611025, UBTU-22-611030, UBTU-22-611035, UBTU-22-611040, UBTU-22-611045, UBTU-24-300014, UBTU-24-300016, UBTU-24-400260, UBTU-24-400270, UBTU-24-400280, UBTU-24-400290, UBTU-24-400320, UBTU-24-400330