[PATCH 08/36] Added severity medium, same as the RHEL 5 STIG.

Michele Newman mnewman at redhat.com
Thu Oct 25 13:49:53 UTC 2012


---
 RHEL6/input/system/accounts/pam.xml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index 356a622..7df4503 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -367,7 +367,7 @@ one to use pam_faillock,
 and a second to use unlock_time and set it to a Value
 -->
 
-<Rule id="deny_password_attempts">
+<Rule id="deny_password_attempts" severity="medium">
 <title>Set Deny For Failed Password Attempts</title>
 <description>
 To configure the system to lock out accounts after a number of incorrect login
@@ -422,7 +422,7 @@ Preventing re-use of previous passwords helps ensure that a compromised password
 <tt>/etc/shadow</tt> is SHA-512. This can be configured in several
 locations.</description>
 
-<Rule id="set_password_hashing_algorithm_systemauth">
+<Rule id="set_password_hashing_algorithm_systemauth" severity="medium">
 <title>Set Password Hashing Algorithm in /etc/pam.d/system-auth</title>
 <description>
 In <tt>/etc/pam.d/system-auth</tt>, the <tt>password</tt> section of
@@ -448,7 +448,7 @@ Using a stronger hashing algorithm makes password cracking attacks more difficul
 <tested by="DS" on="20121024"/>
 </Rule>
 
-<Rule id="set_password_hashing_algorithm_logindefs">
+<Rule id="set_password_hashing_algorithm_logindefs"> severity="medium"
 <title>Set Password Hashing Algorithm in /etc/login.defs</title>
 <description>
 In <tt>/etc/login.defs</tt>, add or correct the following line to ensure
@@ -468,7 +468,7 @@ Using a stronger hashing algorithm makes password cracking attacks more difficul
 <tested by="DS" on="20121024"/>
 </Rule>
 
-<Rule id="set_password_hashing_algorithm_libuserconf">
+<Rule id="set_password_hashing_algorithm_libuserconf" severity="medium">
 <title>Set Password Hashing Algorithm in /etc/libuser.conf</title>
 <description>
 In <tt>/etc/libuser.conf</tt>, add or correct the the following line in its
-- 
1.8.0



More information about the scap-security-guide mailing list