[PATCH 01/10] Added example command.
Shawn Wells
shawn at redhat.com
Sat Nov 3 02:01:18 UTC 2012
On 11/2/12 12:25 AM, Michele Newman wrote:
> ---
> RHEL6/input/system/accounts/pam.xml | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
> index ce0f202..dec081f 100644
> --- a/RHEL6/input/system/accounts/pam.xml
> +++ b/RHEL6/input/system/accounts/pam.xml
> @@ -438,6 +438,7 @@ This is the default.
> Inspect the <tt>password</tt> section of <tt>/etc/pam.d/system-auth</tt> and
> ensure that the <tt>pam_unix.so</tt> module includes the argument
> <tt>sha512</tt>.
> +<tt># grep sha512 /etc/pam.d/system-auth</tt>
> </ocil>
> <rationale>
> Using a stronger hashing algorithm makes password cracking attacks more difficult.
> -- 1.8.0
Swap that to a non-privileged shell symbol & ack (these files are
globally readable)
More information about the scap-security-guide
mailing list