Added the checks for faillock unlock_tine and fail_interval as there was only the
check for faillock deny.
small change for the comment dealing with faillock deny default NOT being 5, but 3
Fixed (in my mind) a typo in RHEL6/input/system/accounts/pam.xml where the oval id for
rule deny_password_attempts_fail_interval from accounts_passwords_pam_fail_interval to
accounts_passwords_pam_faillock_fail_interval. This matches the oval id's for
accounts_passwords_pam_faillock_deny and accounts_passwords_pam_faillock_unlock_time
Brian Millett (2):
Added the checks for accounts_passwords_pam_fail_interval and
accounts_passwords_pam_faillock_unlock_time as there was only the
check for accounts_passwords_pam_faillock_deny
Fixed the oval id from accounts_passwords_pam_fail_interval to
accounts_passwords_pam_faillock_fail_interval to be consistant.
.../accounts_passwords_pam_fail_interval.xml | 49 ++++++++++++++++++++++
.../accounts_passwords_pam_faillock_deny.xml | 4 +-
...accounts_passwords_pam_faillock_unlock_time.xml | 49 ++++++++++++++++++++++
RHEL6/input/system/accounts/pam.xml | 2 +-
4 files changed, 101 insertions(+), 3 deletions(-)
create mode 100644 RHEL6/input/checks/accounts_passwords_pam_fail_interval.xml
create mode 100644 RHEL6/input/checks/accounts_passwords_pam_faillock_unlock_time.xml
--
1.8.2.1