Attached is a patch that modifies the DoD banner check to allow more
whitespace flexibility (the intention is to allow newlines instead of
spaces). The RHEL5 OVAL content does effectively the same thing, though
it's written differently. This allows reasonable formatting of the text for
80-column displays (or GDM banners) so that mid-word wrapping does not
Also note that the RHEL5 STIG specifies:
..."USG interests- -not for your"...
while the RHEL6 STIG specifies:
..."USG interests -- not for your"...
So this may need further modification if the first one is correct; could we
get clarification on that?
[This very thing just came up during an inspection recently; they like it to
be exactly right. I strongly suspect that the banner is supposed to be the
same for both.]
Anyone at Summit this week? Thought I'd ping the list and see if anyone
wanted to meetup for drinks or dinner one of these nights.
There's a session on Wednesday night where we'll be chatting through
security and compliance, but thought an informal get together would be
A check and a fix for testing a password algorithm of minclass for
cracklib in /etc/pam.d/system-auth
Brian Millett (1):
A check and fix for minclass password checking option
.../accounts_password_minclass_login_defs.xml | 43 ++++++++++++++++++++++
.../fixes/bash/password_require_minimun_class.sh | 6 +++
2 files changed, 49 insertions(+)
create mode 100644 RHEL6/input/checks/accounts_password_minclass_login_defs.xml
create mode 100644 RHEL6/input/fixes/bash/password_require_minimun_class.sh
accounts_umask_* checks are referencing the wrong variables.
Brian Millett (1):
RHEL6/input/system/accounts/session.xml only references the
variable "var_accounts_user_umask" so the checkes defined in
RHEL6/input/checks/accounts_umask* error doing an evaluation.
This patch is to have the RHEL6/input/checks/accounts_umask*
reference the same variable referenced in RHEL6/input/system/accounts/session.xml
RHEL6/input/checks/accounts_umask_bashrc.xml | 4 ++--
RHEL6/input/checks/accounts_umask_cshrc.xml | 4 ++--
RHEL6/input/checks/accounts_umask_etc_profile.xml | 4 ++--
RHEL6/input/checks/accounts_umask_login_defs.xml | 4 ++--
4 files changed, 8 insertions(+), 8 deletions(-)