Here is a remediation fix for account password reuse in SSG. Updated to use the '/etc/pam.d/system-auth' file.
-- Frank Caviggia Consultant, Public Sector fcaviggi(a)redhat.com
Members of Red Hat's consulting organization have been silently working
on SCAP content for JBoss Fuse 6, which combines Apache Camel, Apache
CXF, Apache ActiveMQ, Apache Karaf and Fuse Fabric in a single
integrated distribution. Core messaging is provided by Apache ActiveMQ,
services framework (SOAP, XML/HTTP, RESTful HTTP) is provided by Apache
CXF and integration framework is provided by Apache Camel. Apache Karaf
provides a lightweight OSGI-based runtime container.
The JBoss Fuse 6 SCAP content provides guidance for RHEL6-based
deployments. At this time only XCCDF is provided, primarily tested
against the XCCDFExec interpreter. The content will slowly be converted
to 'SSG style' XCCDF/OVAL chunks to ease multi-author editing, and
relevant metadata tags against DISA SRG's will be added to form a JBoss
Fuse 6 STIG submission.
The Fuse content has not yet been incorporated into the RPM build
system. The initial patch has been committed to the repo  and will
show up once developers rebase / git pull.
Congrats to Bryan Saunders, Jason Wong and Kenny Peeples for this