From dcb12cc80bebcc62837f0331d096b188e5877f08 Mon Sep 17 00:00:00 2001
From: Alan Moore <alan.moore@canonical.com>
Date: Wed, 18 Dec 2024 22:27:14 +0000
Subject: [PATCH] Implement rule 5.3.3.2.2 Ensure minimum password length is
 configured

---
 controls/cis_ubuntu2404.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/controls/cis_ubuntu2404.yml b/controls/cis_ubuntu2404.yml
index fcfcb3e927d..96d94fc3a6d 100644
--- a/controls/cis_ubuntu2404.yml
+++ b/controls/cis_ubuntu2404.yml
@@ -1927,8 +1927,10 @@ controls:
     levels:
       - l1_server
       - l1_workstation
-    status: planned
-    notes: TODO. Rule does not seem to be implemented, nor does it map to any rules in ubuntu2204 profile.
+    rules:
+      - var_password_pam_minlen=14
+      - accounts_password_pam_minlen
+    status: automated
 
   - id: 5.3.3.2.3
     title: Ensure password complexity is configured (Manual)