From maura at eclipse.ncsc.mil Thu Aug 20 11:35:34 2015 Content-Type: multipart/mixed; boundary="===============9040504285750634791==" MIME-Version: 1.0 From: Maura Dailey To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH] The name of the check did not reflect its content. Date: Tue, 15 Oct 2013 16:28:25 -0400 Message-ID: <525DA569.3080400@eclipse.ncsc.mil> In-Reply-To: 1381867536-9682-1-git-send-email-maura@eclipse.ncsc.mil --===============9040504285750634791== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable The alternative, by the way, is to delete the check entirely, if no = profiles reference it. On 10/15/2013 04:05 PM, Maura Dailey wrote: > Somewhat confusingly, the name of the check for pam_cracklib's minclass o= ption was accounts_password_minclass_login_defs.xml. I corrected it and the= id of the check inside the file. > > - Maura Dailey > > Signed-off-by: Maura Dailey > --- > .../accounts_password_pam_cracklib_minclass.xml | 43 +++++++++++++= +++++++ > 1 files changed, 43 insertions(+), 0 deletions(-) > create mode 100644 RHEL6/input/checks/accounts_password_pam_cracklib_mi= nclass.xml > > diff --git a/RHEL6/input/checks/accounts_password_pam_cracklib_minclass.x= ml b/RHEL6/input/checks/accounts_password_pam_cracklib_minclass.xml > new file mode 100644 > index 0000000..539164b > --- /dev/null > +++ b/RHEL6/input/checks/accounts_password_pam_cracklib_minclass.xml > @@ -0,0 +1,43 @@ > + > + > + > + Set Password minclass Requirements > + > + Red Hat Enterprise Linux 6 > + > + The password minclass should meet minimum > + requirements using pam_cracklib > + > + > + + test_ref=3D"test_password_pam_cracklib_minclass" /> > + > + > + > + + comment=3D"check the configuration of /etc= /pam.d/system-auth" > + id=3D"test_password_pam_cracklib_minclass"= version=3D"1"> > + > + > + > + > + + version=3D"1"> > + 1 > + + operation=3D"less than or equal" > + var_ref=3D"var_password_pam_cracklib_minclass" /> > + > + > + + datatype=3D"int" id=3D"var_password_pam_cracklib_mi= nclass" > + version=3D"1" /> > + > + + version=3D"1"> > + /etc/pam.d > + system-auth > + ^[\s]*password[\s]+(?:(?:re= quired)|(?:requisite))[\s]+[\w_\.\-=3D\s]+[\s]minclass=3D(-?\d+)(?:[\s]|$)<= /ind:pattern> > + 1 > + > + --===============9040504285750634791==--