Password Policy

MediumLinux Security20-30 min

The brief

Bring this server in line with the password policy: passwords must expire after at most 90 days and be at least 12 characters. Configure the max age in /etc/login.defs and the minimum length in /etc/security/pwquality.conf. Grading inspects the policy files.

What you'll do

Set PASS_MAX_DAYS to 90 in /etc/login.defs
Set minlen = 12 in /etc/security/pwquality.conf

Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.