[PATCH 01/13] DISA FSO

Shawn Wells shawn at redhat.com
Fri Nov 16 22:57:59 UTC 2012


On 11/16/12 5:53 PM, Shawn Wells wrote:
>
> 0001-DISA-FSO-Copy-editing-of-auxiliary-titles.patch
>
>
>  From 809da4a93e64f0da9a2c1d4ad1c115d69c0ffd6a Mon Sep 17 00:00:00 2001
> From: Shawn Wells<shawn at redhat.com>
> Date: Fri, 16 Nov 2012 06:48:25 -0500
> Subject: [PATCH 01/13] DISA FSO: Copy editing of auxiliary titles
>   Modified "require passwords contain" --> "require passwords to contain" per feedback from DISA FSO
>
> ---
>   RHEL6/input/auxiliary/alt-titles-stig.xml |   12 ++++++------
>   1 files changed, 6 insertions(+), 6 deletions(-)
>
> diff --git a/RHEL6/input/auxiliary/alt-titles-stig.xml b/RHEL6/input/auxiliary/alt-titles-stig.xml
> index b7f36d5..0fd40f9 100644
> --- a/RHEL6/input/auxiliary/alt-titles-stig.xml
> +++ b/RHEL6/input/auxiliary/alt-titles-stig.xml
> @@ -138,7 +138,7 @@ The /etc/passwd file must not contain password hashes.
>   There must be no .netrc files on the system.
>   </title>
>   <title rule="password_min_len" shorttitle="Set Password Minimum Length in login.defs">
> -The system must require passwords contain a minimum of 14 characters.
> +The system must require passwords to contain a minimum of 14 characters.
>   </title>
>   <title rule="password_min_age" shorttitle="Set Password Minimum Age">
>   Users must not be able to change passwords more than once every 24 hours.
> @@ -165,16 +165,16 @@ The /etc/passwd file must not contain a plus (+) entry.
>   The system must reject session authentication after three consecutive failed authentication attempts.
>   </title>
>   <title rule="password_require_digits" shorttitle="Set Password Strength Minimum Digit Characters">
> -The system must require passwords contain at least one numeric character.
> +The system must require passwords to contain at least one numeric character.
>   </title>
>   <title rule="password_require_uppercases" shorttitle="Set Password Strength Minimum Uppercase Characters">
> -The system must require passwords contain at least one uppercase alphabetic character.
> +The system must require passwords to contain at least one uppercase alphabetic character.
>   </title>
>   <title rule="password_require_specials" shorttitle="Set Password Strength Minimum Special Characters">
> -The system must require passwords contain at least one special character.
> +The system must require passwords to contain at least one special character.
>   </title>
>   <title rule="password_require_lowercases" shorttitle="Set Password Strength Minimum Lowercase Characters">
> -The system must require passwords contain at least one lowercase alphabetic character.
> +The system must require passwords to contain at least one lowercase alphabetic character.
>   </title>
>   <title rule="password_require_diffchars" shorttitle="Set Password Strength Minimum Different Characters">
>   The system must require at least four characters be changed between the old and new passwords during a password change.
> @@ -705,7 +705,7 @@ All GIDs referenced in /etc/passwd must be defined in /etc/group
>   All accounts on the system must have unique user or account names
>   </title>
>   <title rule="password_require_consecrepeat" shorttitle="Set Password to Maximum of Three Consecutive Repeating Characters">
> -The system must require passwords contain no more than three consecutive repeating characters.
> +The system must require passwords to contain no more than three consecutive repeating characters.
>   </title>
>   <title rule="set_sysctl_net_ipv4_conf_default_accept_redirects" shorttitle="Disable Kernel Parameter for Accepting ICMP Redirects By Default">
>   The system must ignore IPv4 ICMP redirect messages.
> -- 1.7.1

Ack

(note these patches were created by FSO, not myself. I only posted 
publicly.)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20121116/f82f165c/attachment.html>


More information about the scap-security-guide mailing list