Signed-off-by: Brian Millett <bmillett(a)gmail.com>
---
RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml | 4 ++--
RHEL6/input/system/accounts/pam.xml | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml
b/RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml
index 79dedfa..78ea42e 100644
--- a/RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml
+++ b/RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml
@@ -8,8 +8,8 @@
<description>The number of allowed failed logins should be set
correctly.</description>
</metadata>
<criteria>
- <criterion comment="default is set to 5"
test_ref="test_accounts_passwords_pam_faillock_deny_system-auth" />
- <criterion comment="default is set to 5"
test_ref="test_accounts_passwords_pam_faillock_deny_password-auth" />
+ <criterion comment="default is set to 3"
test_ref="test_accounts_passwords_pam_faillock_deny_system-auth" />
+ <criterion comment="default is set to 3"
test_ref="test_accounts_passwords_pam_faillock_deny_password-auth" />
</criteria>
</definition>
diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index f754743..a62d25a 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -485,7 +485,7 @@ Locking out user accounts after a number of incorrect attempts within
a
specific period of time prevents direct password guessing attacks.
</rationale>
<ident cce="27215-3" />
-<oval id="accounts_passwords_pam_fail_interval"
value="var_accounts_passwords_pam_faillock_fail_interval"/>
+<oval id="accounts_passwords_pam_faillock_fail_interval"
value="var_accounts_passwords_pam_faillock_fail_interval"/>
<ref nist="AC-7(a)" disa="1452" />
</Rule>
--
1.8.2.1