[PATCH 15/25] Mapped CCI-000795 to account_disable_post_pw_expiration.

Willy Santos wsantos at redhat.com
Tue Jul 3 00:51:13 UTC 2012


CCI-000795 requires disabling a user's identifier after an org-defined time period of inactivity. The referenced rule satisfies this requirement.

Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 .../accounts/restrictions/account_expiration.xml   |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/system/accounts/restrictions/account_expiration.xml b/rhel6/src/input/system/accounts/restrictions/account_expiration.xml
index 8bae769..75ddadc 100644
--- a/rhel6/src/input/system/accounts/restrictions/account_expiration.xml
+++ b/rhel6/src/input/system/accounts/restrictions/account_expiration.xml
@@ -52,7 +52,7 @@ have been responsibly removed are not available to attackers
 who may have compromised their credentials.
 </rationale>
 <oval id="accounts_disable_post_pw_expiration" value="var_account_disable_post_pw_expiration"/>
-<ref disa="15,16,17"/>
+<ref disa="15,16,17,795"/>
 </Rule>
 
 </Group>
-- 
1.7.7.6



More information about the scap-security-guide mailing list