[PATCH 10/16] CCI-000770 mapped to restrict_serial_port_logins restrict_root_console_logins root_logins

Shawn Wells shawn at redhat.com
Wed Jul 18 16:47:57 UTC 2012


Added to reflect there will be no direct root logins
- restrict_serial_port_logins
- restrict_root_console_logins
- root_logins
---
 .../system/accounts/restrictions/root_logins.xml   |    5 +++--
 1 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/system/accounts/restrictions/root_logins.xml b/RHEL6/input/system/accounts/restrictions/root_logins.xml
index f2970ec..5d10c95 100644
--- a/RHEL6/input/system/accounts/restrictions/root_logins.xml
+++ b/RHEL6/input/system/accounts/restrictions/root_logins.xml
@@ -20,6 +20,7 @@ These are likely to be deprecated in most environments, but may be retained
 for compatibility. Root should also be prohibited from connecting
 via network protocols. Other sections of this document
 include guidance describing how to prevent root from logging in via SSH.</description>
+<ref disa="770" />
 
 <!--
 Ensure that the file
@@ -53,7 +54,7 @@ using the root account.
 </rationale>
 <ident cce="3485-0" />
 <oval id="securetty_root_login_console_only" />
-<ref nist="CM-6, CM-7" />
+<ref nist="CM-6, CM-7" disa="770" />
 </Rule>
 
 <Rule id="restrict_serial_port_logins">
@@ -70,7 +71,7 @@ using the root account.
 </rationale>
 <ident cce="4256-4" />
 <oval id="securetty_no_serial" />
-<ref nist="AC-3, AC-6" />
+<ref nist="AC-3, AC-6" disa="770" />
 </Rule>
 
 <Rule id="no_shelllogin_for_systemaccounts">
-- 
1.7.1


--0OAP2g/MAC+5xKAE--


More information about the scap-security-guide mailing list