[PATCH 0/3] support for Values in login.defs settings

Shawn Wells shawn at redhat.com
Thu May 31 00:17:27 UTC 2012


On 5/29/12 5:26 PM, Jeffrey Blank wrote:
> This addresses multiple issues with OVAL checks and
> XCCDF content not supporting Values to adjust their
> requirements for settings in /etc/login.defs.
>
> Some remaining issues exist, such as the prose not being
> quite good yet, and I believe we will also break apart the
> OVAL check for minimum length to separately cover the
> settings in login.defs and pam_cracklib.  But not today.
>
> Jeffrey Blank (3):
>    updated OVAL checks which inspect login.defs to support Values
>      (variables)
>    updated refine-value names for password items, removed
>      defunct/commented profile items
>    updated guidance to permit adjustment of password warning period,
>      min/max age, length      * also added to test profile, for your
>      testing pleasure
>
>   .../checks/accounts_maximum_age_login_defs.xml     |   26 ++++++---
>   .../checks/accounts_minimum_age_login_defs.xml     |   31 +++++++----
>   .../checks/accounts_password_minlen_login_defs.xml |   17 +++----
>   .../accounts_password_warn_age_login_defs.xml      |   32 +++++++-----
>   rhel6/src/input/profiles/common.xml                |   29 ++---------
>   rhel6/src/input/profiles/test.xml                  |   17 ++++++
>   .../accounts/restrictions/password_expiration.xml  |   56 +++++++++++++-------
>   7 files changed, 121 insertions(+), 87 deletions(-)


Ack to the set


More information about the scap-security-guide mailing list