[PATCH 4/6] Removed CCI references from Group tag and added to appropriate Rule tag.
Michele Newman
mnewman at redhat.com
Mon Dec 17 04:38:10 UTC 2012
---
RHEL6/input/system/accounts/pam.xml | 3 +--
1 files changed, 1 insertions(+), 2 deletions(-)
diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index ba9a285..b5fc78a 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -40,7 +40,6 @@ files, destroying any manually made changes and replacing them with
a series of system defaults. One reference to the configuration
file syntax can be found at
http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/sag-configuration-file.html.</warning>
-<ref disa="1391,1392" />
<Value id="password_history_retain_number" type="number"
operator="equals" interactive="0">
@@ -198,7 +197,7 @@ is different from account lockout, which is provided by the pam_faillock module.
</rationale>
<ident cce="15054-0" />
<oval id="accounts_password_pam_cracklib_retry" value="var_password_pam_cracklib_retry"/>
-<ref nist="IA-5" disa="1092" />
+<ref nist="IA-5" disa="1092,1391,1392" />
<tested by="DS" on="20121024"/>
</Rule>
--
1.7.1
More information about the scap-security-guide
mailing list