[PATCH 4/4] Added <refine-value> for STIG-specific value for failed login attempts.

Willy Santos wsantos at redhat.com
Tue Jul 31 21:19:33 UTC 2012


Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 RHEL6/input/profiles/STIG-server.xml |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/RHEL6/input/profiles/STIG-server.xml b/RHEL6/input/profiles/STIG-server.xml
index fa11c8e..fb7b235 100644
--- a/RHEL6/input/profiles/STIG-server.xml
+++ b/RHEL6/input/profiles/STIG-server.xml
@@ -42,4 +42,6 @@
 <refine-value idref="password_history_retain_number" selector="24"/>
 
 <refine-value idref="var_password_max_age" selector="60"/>
+<!-- from inherited Rule, deny_password_attempts -->
+<refine-value idref="var_accounts_passwords_pam_faillock_deny" selector="3"/>
 </Profile>
-- 
1.7.7.6



More information about the scap-security-guide mailing list