{
  "component-definition": {
    "uuid": "628fbab5-104c-4390-9ac3-40de8deae507",
    "metadata": {
      "title": "Debian 13 ISM No Complexity Requirement Component Definition",
      "last-modified": "2026-09-16T00:00:00Z",
      "version": "1.0.0",
      "oscal-version": "1.1.2",
      "roles": [
        {
          "id": "system-administrator",
          "title": "System Administrator"
        },
        {
          "id": "system-security-officer",
          "title": "System Security Officer"
        }
      ],
      "parties": [
        {
          "uuid": "1b4346aa-044e-4e42-a524-53d40f60f879",
          "type": "organization",
          "name": "Platform Operations"
        }
      ],
      "responsible-parties": [
        {
          "role-id": "system-administrator",
          "party-uuids": [
            "1b4346aa-044e-4e42-a524-53d40f60f879"
          ]
        },
        {
          "role-id": "system-security-officer",
          "party-uuids": [
            "1b4346aa-044e-4e42-a524-53d40f60f879"
          ]
        }
      ],
      "remarks": "Theoretical component. It describes a configuration that satisfies the named controls when applied; it is not an assertion that any particular system is running it. An SSP leveraging this component must supply the implementation evidence for its own hosts.\n\nAssurance state is 'technically-tested': the configuration was applied to a clean Debian 13 install and verified end to end. It has NOT been independently assessed, and is not endorsed or accredited by the ACSC, NIST, or any assessment authority.",
      "document-ids": [
        {
          "scheme": "https://ns.oscalops.net/component-definitions",
          "identifier": "debian-13-pwquality-no-complexity"
        }
      ],
      "props": [
        {
          "name": "assurance-state",
          "ns": "https://ns.oscalops.net/component-definitions",
          "value": "technically-tested"
        },
        {
          "name": "assurance-authority",
          "ns": "https://ns.oscalops.net/component-definitions",
          "value": "none; self-asserted by the contributing author"
        },
        {
          "name": "endorsement",
          "ns": "https://ns.oscalops.net/component-definitions",
          "value": "none"
        },
        {
          "name": "publisher",
          "ns": "https://ns.oscalops.net/component-definitions",
          "value": "library_component-definition contributors"
        },
        {
          "name": "publication-status",
          "ns": "https://ns.oscalops.net/component-definitions",
          "value": "unpublished"
        },
        {
          "name": "artifact-slug",
          "ns": "https://ns.oscalops.net/component-definitions",
          "value": "debian-13-pwquality-no-complexity"
        }
      ],
      "links": [
        {
          "href": "https://library.oscalops.net/component-definitions/debian-13-pwquality-no-complexity/1.0.0/component-definition.json",
          "rel": "canonical",
          "text": "Reserved canonical URL; the registry is not yet published"
        }
      ]
    },
    "components": [
      {
        "uuid": "83161f74-01af-4bbd-abcd-aaa108790f60",
        "type": "software",
        "title": "Debian 13 ISM No Complexity Requirement",
        "description": "ism-2080 requires that complexity requirements are NOT imposed. Every character-class credit and the class-count floor are set to zero, so no class is required and none earns credit against a minimum length: length alone governs.\n\nDepends on debian-13-pwquality-base. This is also what keeps debian-13-pwquality-minlen a pure character count.",
        "purpose": "Ensure no character-class complexity requirement is imposed on local Debian accounts.",
        "props": [
          {
            "name": "os-distribution",
            "ns": "https://ns.oscalops.net/component-definitions",
            "value": "debian"
          },
          {
            "name": "os-release",
            "ns": "https://ns.oscalops.net/component-definitions",
            "value": "13"
          },
          {
            "name": "os-codename",
            "ns": "https://ns.oscalops.net/component-definitions",
            "value": "trixie"
          },
          {
            "name": "setting",
            "ns": "https://ns.oscalops.net/component-definitions",
            "value": "pwquality:dcredit"
          },
          {
            "name": "setting",
            "ns": "https://ns.oscalops.net/component-definitions",
            "value": "pwquality:ucredit"
          },
          {
            "name": "setting",
            "ns": "https://ns.oscalops.net/component-definitions",
            "value": "pwquality:lcredit"
          },
          {
            "name": "setting",
            "ns": "https://ns.oscalops.net/component-definitions",
            "value": "pwquality:ocredit"
          },
          {
            "name": "setting",
            "ns": "https://ns.oscalops.net/component-definitions",
            "value": "pwquality:minclass"
          }
        ],
        "links": [
          {
            "href": "#e30c9d91-4b90-4517-962e-5ee575720ffb",
            "rel": "depends-on",
            "text": "pam_pwquality must be installed and enforcing"
          }
        ],
        "responsible-roles": [
          {
            "role-id": "system-administrator",
            "party-uuids": [
              "1b4346aa-044e-4e42-a524-53d40f60f879"
            ]
          }
        ],
        "control-implementations": [
          {
            "uuid": "d7a26d80-acba-4a23-9e7c-c64f6f5cf2ef",
            "source": "https://raw.githubusercontent.com/AustralianCyberSecurityCentre/ism-oscal/v2026.09.4/ISM_catalog.json",
            "description": "The ISM prohibition on complexity requirements, as published in the ACSC ISM OSCAL catalogue release v2026.09.4.",
            "props": [
              {
                "name": "catalog-release",
                "ns": "https://ns.oscalops.net/component-definitions",
                "value": "v2026.09.4"
              },
              {
                "name": "catalog-authority",
                "ns": "https://ns.oscalops.net/component-definitions",
                "value": "Australian Cyber Security Centre"
              },
              {
                "name": "control-family",
                "ns": "https://ns.oscalops.net/component-definitions",
                "value": "Guidelines for system access > Credential management > Password strength"
              }
            ],
            "links": [
              {
                "href": "#36c41fd6-4e7c-4dbf-92bc-604bf58f40f1",
                "rel": "reference",
                "text": "Pinned ISM catalogue release"
              }
            ],
            "implemented-requirements": [
              {
                "uuid": "17a43680-8d2e-4e71-990f-26f42607f08c",
                "control-id": "ism-2080",
                "description": "Implemented. dcredit, ucredit, lcredit and ocredit are all 0, so no character class earns credit and none is required; minclass = 0 imposes no class-count floor.\n\nVerified by behaviour: an all-lowercase passphrase at the minimum length in force is accepted, which shows length alone governs.",
                "props": [
                  {
                    "name": "implementation-status",
                    "ns": "https://ns.oscalops.net/component-definitions",
                    "value": "implemented"
                  },
                  {
                    "name": "applicability",
                    "ns": "https://cyber.gov.au/ns/ism/oscal/3.0",
                    "value": "NC"
                  },
                  {
                    "name": "applicability",
                    "ns": "https://cyber.gov.au/ns/ism/oscal/3.0",
                    "value": "OS"
                  },
                  {
                    "name": "applicability",
                    "ns": "https://cyber.gov.au/ns/ism/oscal/3.0",
                    "value": "P"
                  },
                  {
                    "name": "applicability",
                    "ns": "https://cyber.gov.au/ns/ism/oscal/3.0",
                    "value": "S"
                  },
                  {
                    "name": "applicability",
                    "ns": "https://cyber.gov.au/ns/ism/oscal/3.0",
                    "value": "TS"
                  },
                  {
                    "name": "correlates-nist-statement",
                    "ns": "https://ns.oscalops.net/component-definitions",
                    "value": "ia-5.1_smt.h"
                  },
                  {
                    "name": "correlation-strength",
                    "ns": "https://ns.oscalops.net/component-definitions",
                    "value": "equivalent"
                  },
                  {
                    "name": "assessment-method",
                    "ns": "https://ns.oscalops.net/component-definitions",
                    "value": "test"
                  },
                  {
                    "name": "assessment-frequency",
                    "ns": "https://ns.oscalops.net/component-definitions",
                    "value": "annual"
                  }
                ],
                "links": [
                  {
                    "href": "#2a808aff-ba82-4522-9e32-2e13f139df63",
                    "rel": "reference",
                    "text": "No-complexity drop-in"
                  },
                  {
                    "href": "#40e16776-7739-4467-8bab-7a8a46b6fa22",
                    "rel": "reference",
                    "text": "Verification script"
                  }
                ],
                "responsible-roles": [
                  {
                    "role-id": "system-administrator",
                    "party-uuids": [
                      "1b4346aa-044e-4e42-a524-53d40f60f879"
                    ]
                  }
                ],
                "remarks": "maxrepeat and maxsequence are retained. These are predictability constraints, not character class complexity requirements, so they do not conflict with this control."
              }
            ]
          }
        ]
      }
    ],
    "back-matter": {
      "resources": [
        {
          "uuid": "2a808aff-ba82-4522-9e32-2e13f139df63",
          "title": "No complexity requirement",
          "description": "All four credits and minclass set to 0, asserting ism-2080. Deploys to /etc/security/pwquality.conf.d/50-ism-no-complexity.conf.",
          "props": [
            {
              "name": "artifact-type",
              "ns": "https://ns.oscalops.net/component-definitions",
              "value": "pwquality-config"
            }
          ],
          "rlinks": [
            {
              "href": "config/pwquality.conf.d/50-ism-no-complexity.conf",
              "media-type": "text/plain"
            }
          ],
          "base64": {
            "filename": "ism-no-complexity.conf",
            "media-type": "text/plain",
            "value": "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"
          }
        },
        {
          "uuid": "f4bf06f0-deb1-48de-9cd0-1e5655272504",
          "title": "Apply script",
          "description": "Installs 50-ism-no-complexity.conf. Refuses to run unless pam_pwquality is already in the password stack.",
          "props": [
            {
              "name": "artifact-type",
              "ns": "https://ns.oscalops.net/component-definitions",
              "value": "shell-script"
            }
          ],
          "rlinks": [
            {
              "href": "scripts/apply-no-complexity.sh",
              "media-type": "text/plain"
            }
          ],
          "base64": {
            "filename": "apply-no-complexity.sh",
            "media-type": "text/plain",
            "value": "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"
          }
        },
        {
          "uuid": "40e16776-7739-4467-8bab-7a8a46b6fa22",
          "title": "Verification script",
          "description": "Asserts the control from behaviour, with every candidate padded to the minimum length in force, and reports separately if another configuration sets a setting this component owns.",
          "props": [
            {
              "name": "artifact-type",
              "ns": "https://ns.oscalops.net/component-definitions",
              "value": "shell-script"
            }
          ],
          "rlinks": [
            {
              "href": "scripts/verify-no-complexity.sh",
              "media-type": "text/plain"
            }
          ],
          "base64": {
            "filename": "verify-no-complexity.sh",
            "media-type": "text/plain",
            "value": "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"
          }
        },
        {
          "uuid": "36c41fd6-4e7c-4dbf-92bc-604bf58f40f1",
          "title": "ACSC ISM OSCAL catalogue v2026.09.4",
          "description": "Australian Cyber Security Centre Information Security Manual OSCAL catalogue, release v2026.09.4: the release this document's control identifiers resolve against.",
          "props": [
            {
              "name": "release-tag",
              "ns": "https://ns.oscalops.net/component-definitions",
              "value": "v2026.09.4"
            },
            {
              "name": "sha256",
              "ns": "https://ns.oscalops.net/component-definitions",
              "value": "237ea09362b8449ed5c5ee85de4725a0468ee73d13af7cf61c26d4e6ac47f12d"
            }
          ],
          "rlinks": [
            {
              "href": "https://raw.githubusercontent.com/AustralianCyberSecurityCentre/ism-oscal/v2026.09.4/ISM_catalog.json",
              "media-type": "application/json"
            }
          ]
        },
        {
          "uuid": "e30c9d91-4b90-4517-962e-5ee575720ffb",
          "title": "debian-13-pwquality-base component-definition",
          "description": "The component this one depends on: pam_pwquality must be installed and enforcing, or nothing here is applied.",
          "document-ids": [
            {
              "scheme": "https://ns.oscalops.net/component-definitions",
              "identifier": "debian-13-pwquality-base"
            }
          ],
          "rlinks": [
            {
              "href": "https://library.oscalops.net/component-definitions/debian-13-pwquality-base/1.0.0/component-definition.json",
              "media-type": "application/json"
            }
          ]
        }
      ]
    }
  }
}