CCI-000795 requires disabling a user's identifier after an org-defined time period of
inactivity. The referenced rule satisfies this requirement.
Signed-off-by: Willy Santos <wsantos(a)redhat.com>
---
.../accounts/restrictions/account_expiration.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/system/accounts/restrictions/account_expiration.xml
b/rhel6/src/input/system/accounts/restrictions/account_expiration.xml
index 8bae769..75ddadc 100644
--- a/rhel6/src/input/system/accounts/restrictions/account_expiration.xml
+++ b/rhel6/src/input/system/accounts/restrictions/account_expiration.xml
@@ -52,7 +52,7 @@ have been responsibly removed are not available to attackers
who may have compromised their credentials.
</rationale>
<oval id="accounts_disable_post_pw_expiration"
value="var_account_disable_post_pw_expiration"/>
-<ref disa="15,16,17"/>
+<ref disa="15,16,17,795"/>
</Rule>
</Group>
--
1.7.7.6