On 6/27/12 6:18 PM, Willy Santos wrote:
Signed-off-by: Willy Santos <firstname.lastname@example.org>
rhel6/src/input/auxiliary/srg_support.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 6167107..5e295dc 100644
@@ -29,7 +29,7 @@ The requirement is impractical or out of scope.
It is unclear how to satisfy this requirement.
-<ref disa="20,31,218,219,224,386,1092" />
+<ref disa="20,31,218,219,224,386,1092,1097" />
</Group> <!-- end unmet_impractical_product -->
||The operating system must enforce password
encryption for transmission.
||Passwords need to be protected at all times
and encryption is the standard method for protecting
passwords during transmission to ensure unauthorized
users/processes do not gain access to them.
|Configure OpenSSH Server if
||If the system needs to act as
an SSH server, then certain changes should be made
to the OpenSSH daemon configuration file
The following recommendations can be applied to this
file. See the
sshd_config(5) man page for
more detailed information.
I'm interpreting that as we must enforce password encryption for operating
system passwords, which the use of SSH would do for us.