# Cis Ubuntu1804 V220 4 5 1 7

> Ensure password dictionary check is enabled

- Skill: `cyberstrikeus/cis-ubuntu1804-v220-4-5-1-7` (Agent Skill)
- Install (CLI): `npx skillmds@latest add cyberstrikeus/cis-ubuntu1804-v220-4-5-1-7`
- Raw SKILL.md: https://api.skillmd.com/api/skills/cyberstrikeus/cis-ubuntu1804-v220-4-5-1-7/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: cyberstrikeus (https://skillmd.com/u/cyberstrikeus)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/cyberstrikeus/cis-ubuntu1804-v220-4-5-1-7

---


# CIS Ubuntu Linux 18.04 LTS Benchmark v2.2.0 - Control 4.5.1.7

## Profile Applicability

- Level 1 - Server
- Level 1 - Workstation

## Description

The `pwquality` `dictcheck` option sets whether to check for the words from the `cracklib` dictionary.

## Rationale

If the operating system allows the user to select passwords based on dictionary words, this increases the chances of password compromise by increasing the opportunity for successful guesses, and brute-force attacks.

## Audit Procedure

### Command Line

Run the following command to verify that the `dictcheck` option in `/etc/security/pwquality.conf` is not set to `0`:

```bash
grep -Pi -- '^\h*dictcheck\h*=\h*0\b' /etc/security/pwquality.conf
```

### Expected Result

Nothing should be returned.

## Remediation

### Command Line

Edit or add the following line in `/etc/security/pwquality.conf` to a value of `1`:

```
dictcheck = 1
```

## Default Value

dictcheck = 1

## References

1. NIST SP 800-53 Rev. 5: IA-5

## CIS Controls

v8 - 5.2 Use Unique Passwords - Use unique passwords for all enterprise assets.

v7 - 4.4 Use Unique Passwords.

## Profile Applicability

- Level 1 - Server
- Level 1 - Workstation

## Assessment Status

Automated