[PATCH 28/36] Added severity medium, same as the RHEL 5 STIG.

Michele Newman mnewman at redhat.com
Thu Oct 25 13:50:13 UTC 2012


---
 RHEL6/input/system/accounts/pam.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index 7df4503..e2b514c 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -392,7 +392,7 @@ prevents direct password guessing attacks.
 <ref nist="AC-7, CM-6" disa="1452,44,47" />
 </Rule>
 
-<Rule id="limiting_password_reuse">
+<Rule id="limiting_password_reuse" severity="medium">
 <title>Limit Password Reuse</title>
 <description>Do not allow users to reuse recent passwords. This can
 be accomplished by using the <tt>remember</tt> option for the <tt>pam_unix</tt> PAM
-- 
1.8.0



More information about the scap-security-guide mailing list