[PATCH 01/10] Added example command.

Shawn Wells shawn at redhat.com
Sat Nov 3 02:01:18 UTC 2012


On 11/2/12 12:25 AM, Michele Newman wrote:
> ---
>   RHEL6/input/system/accounts/pam.xml | 1 +
>   1 file changed, 1 insertion(+)
>
> diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
> index ce0f202..dec081f 100644
> --- a/RHEL6/input/system/accounts/pam.xml
> +++ b/RHEL6/input/system/accounts/pam.xml
> @@ -438,6 +438,7 @@ This is the default.
>   Inspect the <tt>password</tt> section of <tt>/etc/pam.d/system-auth</tt>  and
>   ensure that the <tt>pam_unix.so</tt> module includes the argument
>   <tt>sha512</tt>.
> +<tt># grep sha512 /etc/pam.d/system-auth</tt>
>   </ocil>
>   <rationale>
>   Using a stronger hashing algorithm makes password cracking attacks more difficult.
> -- 1.8.0


Swap that to a non-privileged shell symbol & ack (these files are 
globally readable)


More information about the scap-security-guide mailing list