# ISM password policy — no complexity requirements
#
# Source: ACSC ISM OSCAL catalogue v2026.09.4
#   ism-2080  complexity requirements are not imposed                 (all)
#
# Zero means "no credit and no requirement" for each character class, and
# minclass = 0 imposes no class-count floor, so length alone governs. Credits are
# also what would otherwise let a shorter password satisfy a minimum length, so
# these values keep any minimum a pure character count.
#
# Install to /etc/security/pwquality.conf.d/50-ism-no-complexity.conf

dcredit = 0
ucredit = 0
lcredit = 0
ocredit = 0
minclass = 0