For SSGID Set Lockout Time For Failed Password Attempts - (CCE-27110-6), with the
stig-rhel6-server profile selected from the SCAP stream, when run with SCC 3.1.1.1, may
produce a false-positive on a RHEL6V1R2 complaint machine..
The SSG content checks maximum failed login attempts allowed in /etc/pam.d/system-auth and
/etc/pam.d/password-auth.
The STIG checks /etc/pam.d/system-auth-ac
/etc/pam.d/system-auth-acĀ file is symlinked to /etc/pam.d/system-auth
Any changes made to /etc/pam.d/system-auth are overwritten when authconfig is run.
Show replies by date