---
RHEL6/input/system/accounts/pam.xml | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index 356a622..7df4503 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -367,7 +367,7 @@ one to use pam_faillock,
and a second to use unlock_time and set it to a Value
-->
-<Rule id="deny_password_attempts">
+<Rule id="deny_password_attempts" severity="medium">
<title>Set Deny For Failed Password Attempts</title>
<description>
To configure the system to lock out accounts after a number of incorrect login
@@ -422,7 +422,7 @@ Preventing re-use of previous passwords helps ensure that a
compromised password
<tt>/etc/shadow</tt> is SHA-512. This can be configured in several
locations.</description>
-<Rule id="set_password_hashing_algorithm_systemauth">
+<Rule id="set_password_hashing_algorithm_systemauth"
severity="medium">
<title>Set Password Hashing Algorithm in /etc/pam.d/system-auth</title>
<description>
In <tt>/etc/pam.d/system-auth</tt>, the <tt>password</tt> section
of
@@ -448,7 +448,7 @@ Using a stronger hashing algorithm makes password cracking attacks
more difficul
<tested by="DS" on="20121024"/>
</Rule>
-<Rule id="set_password_hashing_algorithm_logindefs">
+<Rule id="set_password_hashing_algorithm_logindefs">
severity="medium"
<title>Set Password Hashing Algorithm in /etc/login.defs</title>
<description>
In <tt>/etc/login.defs</tt>, add or correct the following line to ensure
@@ -468,7 +468,7 @@ Using a stronger hashing algorithm makes password cracking attacks
more difficul
<tested by="DS" on="20121024"/>
</Rule>
-<Rule id="set_password_hashing_algorithm_libuserconf">
+<Rule id="set_password_hashing_algorithm_libuserconf"
severity="medium">
<title>Set Password Hashing Algorithm in /etc/libuser.conf</title>
<description>
In <tt>/etc/libuser.conf</tt>, add or correct the the following line in its
--
1.8.0