password policy

vi /etc/pam.d/common-password

password        [success=1 default=ignore]      pam_unix.so minlen=2 sha512