What is the impact of removing nullok from pam_unix.so in RHEL PAM configuration?

Issue

• Removal of nullok from pam_unix module in the system-auth and password-auth files can cause any risk ?
• Evaluating the removal of the nullok option from pam_unix.so for security compliance.
• Need to understand the operational and security implications of this change.
• Removing nullok improves security but may introduce login failures for users with blank passwords.
• This change is recommended for CIS compliance, STIG alignment, or general hardening practices.
• Need to understand the operational and security implications of this change.
• Seeking guidance to safely audit and remove nullok from the PAM configuration.