[PATCH 4/4] Added <refine-value> for STIG-specific value for failed login attempts.
Willy Santos
wsantos at redhat.com
Tue Jul 31 21:19:33 UTC 2012
Signed-off-by: Willy Santos <wsantos at redhat.com>
---
RHEL6/input/profiles/STIG-server.xml | 2 ++
1 files changed, 2 insertions(+), 0 deletions(-)
diff --git a/RHEL6/input/profiles/STIG-server.xml b/RHEL6/input/profiles/STIG-server.xml
index fa11c8e..fb7b235 100644
--- a/RHEL6/input/profiles/STIG-server.xml
+++ b/RHEL6/input/profiles/STIG-server.xml
@@ -42,4 +42,6 @@
<refine-value idref="password_history_retain_number" selector="24"/>
<refine-value idref="var_password_max_age" selector="60"/>
+<!-- from inherited Rule, deny_password_attempts -->
+<refine-value idref="var_accounts_passwords_pam_faillock_deny" selector="3"/>
</Profile>
--
1.7.7.6
More information about the scap-security-guide
mailing list