[PATCH 04/36] Added severity rating medium, same as RHEL 5 STIG.

Michele Newman mnewman at redhat.com
Thu Oct 25 13:49:49 UTC 2012


---
 RHEL6/input/system/accounts/restrictions/password_storage.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/RHEL6/input/system/accounts/restrictions/password_storage.xml b/RHEL6/input/system/accounts/restrictions/password_storage.xml
index 6e295d8..5fd968c 100644
--- a/RHEL6/input/system/accounts/restrictions/password_storage.xml
+++ b/RHEL6/input/system/accounts/restrictions/password_storage.xml
@@ -42,7 +42,7 @@ environments.
 <tested by="DS" on="20121024"/>
 </Rule>
 
-<Rule id="no_hashes_outside_shadow">
+<Rule id="no_hashes_outside_shadow" severity="medium">
 <title>Verify All Account Password Hashes are Shadowed</title>
 <description>
 If any password hashes are stored in <tt>/etc/passwd</tt> (in the second field,
-- 
1.8.0



More information about the scap-security-guide mailing list