[PATCH 04/36] Added severity rating medium, same as RHEL 5 STIG.
Michele Newman
mnewman at redhat.com
Thu Oct 25 13:49:49 UTC 2012
---
RHEL6/input/system/accounts/restrictions/password_storage.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/RHEL6/input/system/accounts/restrictions/password_storage.xml b/RHEL6/input/system/accounts/restrictions/password_storage.xml
index 6e295d8..5fd968c 100644
--- a/RHEL6/input/system/accounts/restrictions/password_storage.xml
+++ b/RHEL6/input/system/accounts/restrictions/password_storage.xml
@@ -42,7 +42,7 @@ environments.
<tested by="DS" on="20121024"/>
</Rule>
-<Rule id="no_hashes_outside_shadow">
+<Rule id="no_hashes_outside_shadow" severity="medium">
<title>Verify All Account Password Hashes are Shadowed</title>
<description>
If any password hashes are stored in <tt>/etc/passwd</tt> (in the second field,
--
1.8.0
More information about the scap-security-guide
mailing list