[PATCH 1/2] quick fixes to severity placement (for validation)

Jeffrey Blank blank at eclipse.ncsc.mil
Thu Oct 25 21:10:37 UTC 2012


Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
 RHEL6/input/system/accounts/pam.xml                |    2 +-
 RHEL6/input/system/accounts/physical.xml           |    2 +-
 .../accounts/restrictions/password_expiration.xml  |    2 +-
 RHEL6/input/system/network/kernel.xml              |    2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index e2b514c..28c50bf 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -448,7 +448,7 @@ Using a stronger hashing algorithm makes password cracking attacks more difficul
 <tested by="DS" on="20121024"/>
 </Rule>
 
-<Rule id="set_password_hashing_algorithm_logindefs"> severity="medium"
+<Rule id="set_password_hashing_algorithm_logindefs" severity="medium">
 <title>Set Password Hashing Algorithm in /etc/login.defs</title>
 <description>
 In <tt>/etc/login.defs</tt>, add or correct the following line to ensure
diff --git a/RHEL6/input/system/accounts/physical.xml b/RHEL6/input/system/accounts/physical.xml
index 85b8a73..9f7d3ba 100644
--- a/RHEL6/input/system/accounts/physical.xml
+++ b/RHEL6/input/system/accounts/physical.xml
@@ -55,7 +55,7 @@ file should not have any access privileges anyway.
 <ref nist="AC-3, CM-6" disa="225"/>
 </Rule>
 
-<Rule id="permissions_grub_conf"> severity="medium"
+<Rule id="permissions_grub_conf" severity="medium">
 <title>Verify /boot/grub/grub.conf Permissions</title>
 <description>File permissions for <tt>/boot/grub/grub.conf</tt> should be set to 600, which
 is the default.
diff --git a/RHEL6/input/system/accounts/restrictions/password_expiration.xml b/RHEL6/input/system/accounts/restrictions/password_expiration.xml
index d98fc0e..5f01b5c 100644
--- a/RHEL6/input/system/accounts/restrictions/password_expiration.xml
+++ b/RHEL6/input/system/accounts/restrictions/password_expiration.xml
@@ -107,7 +107,7 @@ behavior that may result.
 </Rule>
 
 
-<Rule id="password_min_age"> severity="medium"
+<Rule id="password_min_age" severity="medium">
 <title>Set Password Minimum Age</title>
 <description>To specify password minimum age for new accounts,
 edit the file <tt>/etc/login.defs</tt>
diff --git a/RHEL6/input/system/network/kernel.xml b/RHEL6/input/system/network/kernel.xml
index 2921e10..50ebccd 100644
--- a/RHEL6/input/system/network/kernel.xml
+++ b/RHEL6/input/system/network/kernel.xml
@@ -63,7 +63,7 @@ only appropriate for routers.</rationale>
 </Rule>
 </Group>
 
-<Group id="network_host_and_router_parameters" severity="medium">
+<Group id="network_host_and_router_parameters">
 <title>Network Related Kernel Runtime Parameters for Hosts and Routers</title>
 <description>Certain kernel parameters should be set for systems which are
 acting as either hosts or routers to improve the system's ability defend
-- 
1.7.1



More information about the scap-security-guide mailing list