[PATCH] new Rule and check for disabling local accounts

Jeffrey Blank blank at eclipse.ncsc.mil
Wed Jun 27 22:35:37 UTC 2012


this meets some OS SRG reqs as well

Jeffrey Blank (1):
  added new Rule and check to disable inactive accounts      *
    inactivity is defined as time following automatic password
    expiration      * also added relevant CCI refs

 rhel6/src/input/auxiliary/srg_support.xml          |   13 +++++-
 .../checks/accounts_disable_post_pw_expiration.xml |   39 +++++++++++++++++
 rhel6/src/input/guide.xslt                         |    1 +
 rhel6/src/input/profiles/test.xml                  |   12 ++---
 .../accounts/restrictions/account_expiration.xml   |   46 ++++++++++++++++++++
 5 files changed, 102 insertions(+), 9 deletions(-)
 create mode 100644 rhel6/src/input/checks/accounts_disable_post_pw_expiration.xml
 create mode 100644 rhel6/src/input/system/accounts/restrictions/account_expiration.xml



More information about the scap-security-guide mailing list