[PATCH 4/6] Removed CCI references from Group tag and added to appropriate Rule tag.

Michele Newman mnewman at redhat.com
Mon Dec 17 04:38:10 UTC 2012


---
 RHEL6/input/system/accounts/pam.xml |    3 +--
 1 files changed, 1 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index ba9a285..b5fc78a 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -40,7 +40,6 @@ files, destroying any manually made changes and replacing them with
 a series of system defaults. One reference to the configuration
 file syntax can be found at
 http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/sag-configuration-file.html.</warning>
-<ref disa="1391,1392" />
 
 <Value id="password_history_retain_number" type="number"
 operator="equals" interactive="0">
@@ -198,7 +197,7 @@ is different from account lockout, which is provided by the pam_faillock module.
 </rationale>
 <ident cce="15054-0" />
 <oval id="accounts_password_pam_cracklib_retry" value="var_password_pam_cracklib_retry"/>
-<ref nist="IA-5" disa="1092" />
+<ref nist="IA-5" disa="1092,1391,1392" />
 <tested by="DS" on="20121024"/>
 </Rule>
 
-- 
1.7.1



More information about the scap-security-guide mailing list