>From 70f0c638696d47a7b9e55d9a0f6bee81ea21456e Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Mon, 23 Dec 2013 08:09:56 -0500 Subject: [PATCH 23/25] accounts_password_pam_cracklib_retry --> shared/ - Tested on RHEL7 - Updated symlinks Signed-off-by: Shawn Wells --- :100644 120000 175b55c... 6480704... T RHEL/6/input/checks/accounts_password_pam_cracklib_retry.xml :000000 120000 0000000... 6480704... A RHEL/7/input/checks/accounts_password_pam_cracklib_retry.xml :100644 100644 f30f06e... 2e566bf... M scap-security-guide.spec :000000 100644 0000000... 70f5a5b... A shared/oval/accounts_password_pam_cracklib_retry.xml .../accounts_password_pam_cracklib_retry.xml | 35 +--------------------- .../accounts_password_pam_cracklib_retry.xml | 1 + scap-security-guide.spec | 1 + .../oval/accounts_password_pam_cracklib_retry.xml | 35 ++++++++++++++++++++++ 4 files changed, 38 insertions(+), 34 deletions(-) diff --git a/RHEL/6/input/checks/accounts_password_pam_cracklib_retry.xml b/RHEL/6/input/checks/accounts_password_pam_cracklib_retry.xml deleted file mode 100644 index 175b55c..0000000 --- a/RHEL/6/input/checks/accounts_password_pam_cracklib_retry.xml +++ /dev/null @@ -1,34 +0,0 @@ - - - - Set Password retry Requirements - - Red Hat Enterprise Linux 6 - - The password retry should meet minimum - requirements using pam_cracklib - - - - - - - - - - - - - - /etc/pam.d/system-auth - ^\s*password\s+(?:(?:required)|(?:requisite))\s+pam_cracklib\.so.*retry=([0-9]*).*$ - 1 - - - - - - - - diff --git a/RHEL/6/input/checks/accounts_password_pam_cracklib_retry.xml b/RHEL/6/input/checks/accounts_password_pam_cracklib_retry.xml new file mode 120000 index 0000000..6480704 --- /dev/null +++ b/RHEL/6/input/checks/accounts_password_pam_cracklib_retry.xml @@ -0,0 +1 @@ +../../../../shared/oval/accounts_password_pam_cracklib_retry.xml \ No newline at end of file diff --git a/RHEL/7/input/checks/accounts_password_pam_cracklib_retry.xml b/RHEL/7/input/checks/accounts_password_pam_cracklib_retry.xml new file mode 120000 index 0000000..6480704 --- /dev/null +++ b/RHEL/7/input/checks/accounts_password_pam_cracklib_retry.xml @@ -0,0 +1 @@ +../../../../shared/oval/accounts_password_pam_cracklib_retry.xml \ No newline at end of file diff --git a/scap-security-guide.spec b/scap-security-guide.spec index f30f06e..2e566bf 100644 --- a/scap-security-guide.spec +++ b/scap-security-guide.spec @@ -74,6 +74,7 @@ cp -a RHEL/6/input/auxiliary/scap-security-guide.8 %{buildroot}%{_mandir}/en/man - OVAL for accounts_password_minlen_login_defs - OVAL for accounts_minimum_age_login_defs - OVAL for accounts_password_warn_age_login_defs +- OVAL for accounts_password_pam_cracklib_retry * Fri Nov 01 2013 Jan iankko Lieskovsky 0.1-15 - Version bump diff --git a/shared/oval/accounts_password_pam_cracklib_retry.xml b/shared/oval/accounts_password_pam_cracklib_retry.xml new file mode 100644 index 0000000..70f5a5b --- /dev/null +++ b/shared/oval/accounts_password_pam_cracklib_retry.xml @@ -0,0 +1,35 @@ + + + + Set Password retry Requirements + + Red Hat Enterprise Linux 6 + Red Hat Enterprise Linux 7 + + The password retry should meet minimum + requirements using pam_cracklib + + + + + + + + + + + + + + /etc/pam.d/system-auth + ^\s*password\s+(?:(?:required)|(?:requisite))\s+pam_cracklib\.so.*retry=([0-9]*).*$ + 1 + + + + + + + + -- 1.8.3.1