[PATCH] Fix login.defs syntax

Joe Nall joe at nall.com
Wed Jun 6 05:03:15 UTC 2012


---
 .../accounts/restrictions/password_expiration.xml  |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/rhel6/src/input/system/accounts/restrictions/password_expiration.xml b/rhel6/src/input/system/accounts/restrictions/password_expiration.xml
index 43179a4..9349fec 100644
--- a/rhel6/src/input/system/accounts/restrictions/password_expiration.xml
+++ b/rhel6/src/input/system/accounts/restrictions/password_expiration.xml
@@ -80,7 +80,7 @@ age, and 7 day warning period with the following command:
 <description>To specify password length requirements for new accounts,
 edit the file <tt>/etc/login.defs</tt> and add or correct the following
 lines:
-<pre>PASS_MIN_LEN=12<!-- <sub idref="var_password_min_len"> --></pre>
+<pre>PASS_MIN_LEN 12<!-- <sub idref="var_password_min_len"> --></pre>
 TODO: More research needed to understand exact interaction: when precisely is this file consulted?
 <br/><br/>
 If a program consults <tt>/etc/login.defs</tt> and also another PAM module
@@ -107,7 +107,7 @@ behavior that may result.
 <description>To specify password minimum age for new accounts,
 edit the file <tt>/etc/login.defs</tt>
 and add or correct the following line, replacing <i>DAYS</i> appropriately:
-<pre>PASS_MIN_DAYS=<i>DAYS</i></pre>
+<pre>PASS_MIN_DAYS <i>DAYS</i></pre>
 A value of 7 days is considered for sufficient for many
 environments.
 </description>
@@ -147,7 +147,7 @@ the utility of a stolen password.</rationale>
 expiration that a warning will be issued to users,
 edit the file <tt>/etc/login.defs</tt> and add or correct
  the following line:
-<pre>PASS_WARN_AGE=<i>DAYS</i></pre>
+<pre>PASS_WARN_AGE <i>DAYS</i></pre>
 A value of 7 days is considered for appropriate for many
 environments.
 <!-- <sub idref="password_warn_age_login_defs_value" /> -->
-- 
1.7.1



More information about the scap-security-guide mailing list