On 11/16/12 5:53 PM, Shawn Wells wrote:

0001-DISA-FSO-Copy-editing-of-auxiliary-titles.patch

From 809da4a93e64f0da9a2c1d4ad1c115d69c0ffd6a Mon Sep 17 00:00:00 2001 From: Shawn Wellsshawn@redhat.com Date: Fri, 16 Nov 2012 06:48:25 -0500 Subject: [PATCH 01/13] DISA FSO: Copy editing of auxiliary titles Modified "require passwords contain" --> "require passwords to contain" per feedback from DISA FSO

---

RHEL6/input/auxiliary/alt-titles-stig.xml | 12 ++++++------ 1 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/RHEL6/input/auxiliary/alt-titles-stig.xml b/RHEL6/input/auxiliary/alt-titles-stig.xml index b7f36d5..0fd40f9 100644 --- a/RHEL6/input/auxiliary/alt-titles-stig.xml +++ b/RHEL6/input/auxiliary/alt-titles-stig.xml @@ -138,7 +138,7 @@ The /etc/passwd file must not contain password hashes. There must be no .netrc files on the system.

</title> <title rule="password_min_len" shorttitle="Set Password Minimum Length in login.defs"> -The system must require passwords contain a minimum of 14 characters. +The system must require passwords to contain a minimum of 14 characters. </title> <title rule="password_min_age" shorttitle="Set Password Minimum Age"> Users must not be able to change passwords more than once every 24 hours. @@ -165,16 +165,16 @@ The /etc/passwd file must not contain a plus (+) entry. The system must reject session authentication after three consecutive failed authentication attempts. </title> <title rule="password_require_digits" shorttitle="Set Password Strength Minimum Digit Characters"> -The system must require passwords contain at least one numeric character. +The system must require passwords to contain at least one numeric character. </title> <title rule="password_require_uppercases" shorttitle="Set Password Strength Minimum Uppercase Characters"> -The system must require passwords contain at least one uppercase alphabetic character. +The system must require passwords to contain at least one uppercase alphabetic character. </title> <title rule="password_require_specials" shorttitle="Set Password Strength Minimum Special Characters"> -The system must require passwords contain at least one special character. +The system must require passwords to contain at least one special character. </title> <title rule="password_require_lowercases" shorttitle="Set Password Strength Minimum Lowercase Characters"> -The system must require passwords contain at least one lowercase alphabetic character. +The system must require passwords to contain at least one lowercase alphabetic character. </title> <title rule="password_require_diffchars" shorttitle="Set Password Strength Minimum Different Characters"> The system must require at least four characters be changed between the old and new passwords during a password change. @@ -705,7 +705,7 @@ All GIDs referenced in /etc/passwd must be defined in /etc/group All accounts on the system must have unique user or account names </title> <title rule="password_require_consecrepeat" shorttitle="Set Password to Maximum of Three Consecutive Repeating Characters"> -The system must require passwords contain no more than three consecutive repeating characters. +The system must require passwords to contain no more than three consecutive repeating characters. </title> <title rule="set_sysctl_net_ipv4_conf_default_accept_redirects" shorttitle="Disable Kernel Parameter for Accepting ICMP Redirects By Default"> The system must ignore IPv4 ICMP redirect messages. -- 1.7.1

Ack

(note these patches were created by FSO, not myself. I only posted publicly.)