From shawn at redhat.com Thu Aug 20 11:37:26 2015 Content-Type: multipart/mixed; boundary="===============1047836898754986784==" MIME-Version: 1.0 From: Shawn Wells To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH 14/21] Remove display_login_attempts/RHEL-06-000506 from RHEL 6 STIG Date: Sun, 27 Jul 2014 23:41:59 -0400 Message-ID: <53D5C687.5050007@redhat.com> In-Reply-To: 1406518028-3921-15-git-send-email-shawn@redhat.com --===============1047836898754986784== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 7/27/14, 11:27 PM, Shawn Wells wrote: > From: Leland Steinke > > This is no longer a requirement > > Signed-off-by: Leland Steinke > --- > RHEL/6/input/auxiliary/stig_overlay.xml | 4 ++-- > .../input/profiles/stig-rhel6-server-upstream.xml | 2 -- > RHEL/6/input/system/accounts/pam.xml | 2 +- > 3 files changed, 3 insertions(+), 5 deletions(-) > > diff --git a/RHEL/6/input/auxiliary/stig_overlay.xml b/RHEL/6/input/auxil= iary/stig_overlay.xml > index 958b119..9d90605 100644 > --- a/RHEL/6/input/auxiliary/stig_overlay.xml > +++ b/RHEL/6/input/auxiliary/stig_overlay.xml > @@ -1247,10 +1247,10 @@ > > The operating system must conduct backups of system-level info= rmation contained in the information system per organization defined freque= ncy to conduct backups that are consistent with recovery time and recovery = point objectives. > > - > + > > > The operating system, upon successful logon, must display to t= he user the date and time of the last logon or access via ssh. > diff --git a/RHEL/6/input/profiles/stig-rhel6-server-upstream.xml b/RHEL/= 6/input/profiles/stig-rhel6-server-upstream.xml > index 9b01757..518aa04 100644 > --- a/RHEL/6/input/profiles/stig-rhel6-server-upstream.xml > +++ b/RHEL/6/input/profiles/stig-rhel6-server-upstream.xml > @@ -91,8 +91,6 @@ upstream project homepage ishttps://fedorahosted.org/sc= ap-security-guide/. > = > > - > > diff --git a/RHEL/6/input/system/accounts/pam.xml b/RHEL/6/input/system/a= ccounts/pam.xml > index 66f932d..69721be 100644 > --- a/RHEL/6/input/system/accounts/pam.xml > +++ b/RHEL/6/input/system/accounts/pam.xml > @@ -76,7 +76,7 @@ and gives them an opportunity to notify administrators. > > > > - > + > > = > > -- 1.7.1 > -- = ack (i see this was added back in via patch 15, and the original FSO = patch just updated the CCI mapping) --===============1047836898754986784== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGh0bWw+CiAgPGhlYWQ+CiAgICA8bWV0YSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRG LTgiIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSI+CiAgPC9oZWFkPgogIDxib2R5IGJnY29sb3I9 IiNGRkZGRkYiIHRleHQ9IiMwMDAwMDAiPgogICAgPGJyPgogICAgPGRpdiBjbGFzcz0ibW96LWNp dGUtcHJlZml4Ij5PbiA3LzI3LzE0LCAxMToyNyBQTSwgU2hhd24gV2VsbHMKICAgICAgd3JvdGU6 PGJyPgogICAgPC9kaXY+CiAgICA8YmxvY2txdW90ZQogICAgICBjaXRlPSJtaWQ6MTQwNjUxODAy OC0zOTIxLTE1LWdpdC1zZW5kLWVtYWlsLXNoYXduQHJlZGhhdC5jb20iCiAgICAgIHR5cGU9ImNp dGUiPgogICAgICA8ZGl2IGNsYXNzPSJtb3otdGV4dC1wbGFpbiIgd3JhcD0idHJ1ZSIgZ3JhcGhp Y2FsLXF1b3RlPSJ0cnVlIgogICAgICAgIHN0eWxlPSJmb250LWZhbWlseTogLW1vei1maXhlZDsg Zm9udC1zaXplOiAxMnB4OyIKICAgICAgICBsYW5nPSJ4LXVuaWNvZGUiPgogICAgICAgIDxwcmUg d3JhcD0iIj5Gcm9tOiBMZWxhbmQgU3RlaW5rZSA8YSBtb3otZG8tbm90LXNlbmQ9InRydWUiIGNs YXNzPSJtb3otdHh0LWxpbmstcmZjMjM5NkUiIGhyZWY9Im1haWx0bzpsZWxhbmQuai5zdGVpbmtl LmN0ckBtYWlsLm1pbCI+Jmx0O2xlbGFuZC5qLnN0ZWlua2UuY3RyQG1haWwubWlsJmd0OzwvYT4K ClRoaXMgaXMgbm8gbG9uZ2VyIGEgcmVxdWlyZW1lbnQKClNpZ25lZC1vZmYtYnk6IExlbGFuZCBT dGVpbmtlIDxhIG1vei1kby1ub3Qtc2VuZD0idHJ1ZSIgY2xhc3M9Im1vei10eHQtbGluay1yZmMy Mzk2RSIgaHJlZj0ibWFpbHRvOmxlbGFuZC5qLnN0ZWlua2UuY3RyQG1haWwubWlsIj4mbHQ7bGVs YW5kLmouc3RlaW5rZS5jdHJAbWFpbC5taWwmZ3Q7PC9hPgotLS0KIFJIRUwvNi9pbnB1dC9hdXhp bGlhcnkvc3RpZ19vdmVybGF5LnhtbCAgICAgICAgICAgIHwgICAgNCArKy0tCiAuLi4vaW5wdXQv cHJvZmlsZXMvc3RpZy1yaGVsNi1zZXJ2ZXItdXBzdHJlYW0ueG1sICB8ICAgIDIgLS0KIFJIRUwv Ni9pbnB1dC9zeXN0ZW0vYWNjb3VudHMvcGFtLnhtbCAgICAgICAgICAgICAgIHwgICAgMiArLQog MyBmaWxlcyBjaGFuZ2VkLCAzIGluc2VydGlvbnMoKyksIDUgZGVsZXRpb25zKC0pCgpkaWZmIC0t Z2l0IGEvUkhFTC82L2lucHV0L2F1eGlsaWFyeS9zdGlnX292ZXJsYXkueG1sIGIvUkhFTC82L2lu cHV0L2F1eGlsaWFyeS9zdGlnX292ZXJsYXkueG1sCmluZGV4IDk1OGIxMTkuLjlkOTA2MDUgMTAw NjQ0Ci0tLSBhL1JIRUwvNi9pbnB1dC9hdXhpbGlhcnkvc3RpZ19vdmVybGF5LnhtbAorKysgYi9S SEVMLzYvaW5wdXQvYXV4aWxpYXJ5L3N0aWdfb3ZlcmxheS54bWwKQEAgLTEyNDcsMTAgKzEyNDcs MTAgQEAKIAkJJmx0O1ZNU2luZm8gVktleT0iMzg0ODYiIFNWS2V5PSI1MDI4NyIgVlJlbGVhc2U9 IjEiIC8mZ3Q7CiAJCSZsdDt0aXRsZSZndDtUaGUgb3BlcmF0aW5nIHN5c3RlbSBtdXN0IGNvbmR1 Y3QgYmFja3VwcyBvZiBzeXN0ZW0tbGV2ZWwgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoZSBp bmZvcm1hdGlvbiBzeXN0ZW0gcGVyIG9yZ2FuaXphdGlvbiBkZWZpbmVkIGZyZXF1ZW5jeSB0byBj b25kdWN0IGJhY2t1cHMgdGhhdCBhcmUgY29uc2lzdGVudCB3aXRoIHJlY292ZXJ5IHRpbWUgYW5k IHJlY292ZXJ5IHBvaW50IG9iamVjdGl2ZXMuJmx0Oy90aXRsZSZndDsKIAkmbHQ7L292ZXJsYXkm Z3Q7Ci0JJmx0O292ZXJsYXkgb3duZXI9ImRpc2FzdGlnIiBydWxlaWQ9IlhYWFgiIG93bmVyaWQ9 IlJIRUwtMDYtMDAwNTA2IiBkaXNhPSI1MiIgc2V2ZXJpdHk9Im1lZGl1bSImZ3Q7CismbHQ7IS0t CSZsdDtvdmVybGF5IG93bmVyPSJkaXNhc3RpZyIgcnVsZWlkPSJYWFhYIiBvd25lcmlkPSJSSEVM LTA2LTAwMDUwNiIgZGlzYT0iNTIiIHNldmVyaXR5PSJtZWRpdW0iJmd0OwogCQkmbHQ7Vk1TaW5m byBWS2V5PSIzODQ4NSIgU1ZLZXk9IjUwMjg2IiBWUmVsZWFzZT0iMSIgLyZndDsKIAkJJmx0O3Rp dGxlJmd0O1RoZSBvcGVyYXRpbmcgc3lzdGVtLCB1cG9uIHN1Y2Nlc3NmdWwgbG9nb24sIG11c3Qg ZGlzcGxheSB0byB0aGUgdXNlciB0aGUgZGF0ZSBhbmQgdGltZSBvZiB0aGUgbGFzdCBsb2dvbiBv ciBhY2Nlc3MgdmlhIGEgbG9jYWwgY29uc29sZSBvciB0dHkuJmx0Oy90aXRsZSZndDsKLQkmbHQ7 L292ZXJsYXkmZ3Q7CisJJmx0Oy9vdmVybGF5Jmd0OyAtLSZndDsKIAkmbHQ7b3ZlcmxheSBvd25l cj0iZGlzYXN0aWciIHJ1bGVpZD0iWFhYWCIgb3duZXJpZD0iUkhFTC0wNi0wMDA1MDciIGRpc2E9 IjUyIiBzZXZlcml0eT0ibWVkaXVtIiZndDsKIAkJJmx0O1ZNU2luZm8gVktleT0iMzg0ODQiIFNW S2V5PSI1MDI4NSIgVlJlbGVhc2U9IjEiIC8mZ3Q7CiAJCSZsdDt0aXRsZSZndDtUaGUgb3BlcmF0 aW5nIHN5c3RlbSwgdXBvbiBzdWNjZXNzZnVsIGxvZ29uLCBtdXN0IGRpc3BsYXkgdG8gdGhlIHVz ZXIgdGhlIGRhdGUgYW5kIHRpbWUgb2YgdGhlIGxhc3QgbG9nb24gb3IgYWNjZXNzIHZpYSBzc2gu Jmx0Oy90aXRsZSZndDsKZGlmZiAtLWdpdCBhL1JIRUwvNi9pbnB1dC9wcm9maWxlcy9zdGlnLXJo ZWw2LXNlcnZlci11cHN0cmVhbS54bWwgYi9SSEVMLzYvaW5wdXQvcHJvZmlsZXMvc3RpZy1yaGVs Ni1zZXJ2ZXItdXBzdHJlYW0ueG1sCmluZGV4IDliMDE3NTcuLjUxOGFhMDQgMTAwNjQ0Ci0tLSBh L1JIRUwvNi9pbnB1dC9wcm9maWxlcy9zdGlnLXJoZWw2LXNlcnZlci11cHN0cmVhbS54bWwKKysr IGIvUkhFTC82L2lucHV0L3Byb2ZpbGVzL3N0aWctcmhlbDYtc2VydmVyLXVwc3RyZWFtLnhtbApA QCAtOTEsOCArOTEsNiBAQCB1cHN0cmVhbSBwcm9qZWN0IGhvbWVwYWdlIGlzIDxhIG1vei1kby1u b3Qtc2VuZD0idHJ1ZSIgY2xhc3M9Im1vei10eHQtbGluay1mcmVldGV4dCIgaHJlZj0iaHR0cHM6 Ly9mZWRvcmFob3N0ZWQub3JnL3NjYXAtc2VjdXJpdHktZ3VpZGUvIj5odHRwczovL2ZlZG9yYWhv c3RlZC5vcmcvc2NhcC1zZWN1cml0eS1ndWlkZS88L2E+LgogCiAmbHQ7c2VsZWN0IGlkcmVmPSJz bWFydGNhcmRfYXV0aCIgc2VsZWN0ZWQ9InRydWUiIC8mZ3Q7CiAKLSZsdDtzZWxlY3QgaWRyZWY9 ImRpc3BsYXlfbG9naW5fYXR0ZW1wdHMiIHNlbGVjdGVkPSJ0cnVlIiAvJmd0OwotCiAmbHQ7c2Vs ZWN0IGlkcmVmPSJhY2NvdW50c19wYXNzd29yZHNfcGFtX2ZhaWxsb2NrX3VubG9ja190aW1lIiBz ZWxlY3RlZD0idHJ1ZSIgLyZndDsKICZsdDtyZWZpbmUtdmFsdWUgaWRyZWY9InZhcl9hY2NvdW50 c19wYXNzd29yZHNfcGFtX2ZhaWxsb2NrX3VubG9ja190aW1lIiBzZWxlY3Rvcj0iNjA0ODAwIi8m Z3Q7CiAmbHQ7c2VsZWN0IGlkcmVmPSJhY2NvdW50c19wYXNzd29yZHNfcGFtX2ZhaWxfaW50ZXJ2 YWwiIHNlbGVjdGVkPSJ0cnVlIiAvJmd0OwpkaWZmIC0tZ2l0IGEvUkhFTC82L2lucHV0L3N5c3Rl bS9hY2NvdW50cy9wYW0ueG1sIGIvUkhFTC82L2lucHV0L3N5c3RlbS9hY2NvdW50cy9wYW0ueG1s CmluZGV4IDY2ZjkzMmQuLjY5NzIxYmUgMTAwNjQ0Ci0tLSBhL1JIRUwvNi9pbnB1dC9zeXN0ZW0v YWNjb3VudHMvcGFtLnhtbAorKysgYi9SSEVMLzYvaW5wdXQvc3lzdGVtL2FjY291bnRzL3BhbS54 bWwKQEAgLTc2LDcgKzc2LDcgQEAgYW5kIGdpdmVzIHRoZW0gYW4gb3Bwb3J0dW5pdHkgdG8gbm90 aWZ5IGFkbWluaXN0cmF0b3JzLgogJmx0Oy9yYXRpb25hbGUmZ3Q7CiAmbHQ7aWRlbnQgY2NlPSIy NzI5MS00IiAvJmd0OwogJmx0O292YWwgaWQ9ImRpc3BsYXlfbG9naW5fYXR0ZW1wdHMiIC8mZ3Q7 Ci0mbHQ7cmVmIGRpc2E9IjUzIiAvJmd0OworJmx0O3JlZiBkaXNhPSIiIC8mZ3Q7CiAmbHQ7L1J1 bGUmZ3Q7CiAKICZsdDtHcm91cCBpZD0icGFzc3dvcmRfcXVhbGl0eSImZ3Q7CjxkaXYgY2xhc3M9 Im1vei10eHQtc2lnIj4tLSAKMS43LjEKCjxkaXYgY2xhc3M9Im1vei10eHQtc2lnIj4tLSA8L2Rp dj48L2Rpdj48L3ByZT4KICAgICAgPC9kaXY+CiAgICA8L2Jsb2NrcXVvdGU+CiAgICA8YnI+CiAg ICBhY2sgKGkgc2VlIHRoaXMgd2FzIGFkZGVkIGJhY2sgaW4gdmlhIHBhdGNoIDE1LCBhbmQgdGhl IG9yaWdpbmFsIEZTTwogICAgcGF0Y2gganVzdCB1cGRhdGVkIHRoZSBDQ0kgbWFwcGluZyk8YnI+ CiAgPC9ib2R5Pgo8L2h0bWw+Cg== --===============1047836898754986784==--