[PATCH 4/4] renamed a Rule, removed redundant CCI ref

Jeffrey Blank blank at eclipse.ncsc.mil
Thu Oct 25 23:49:19 UTC 2012


Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
 RHEL6/input/system/accounts/pam.xml                |    2 +-
 .../system/accounts/restrictions/root_logins.xml   |    2 --
 2 files changed, 1 insertions(+), 3 deletions(-)

diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index 28c50bf..3633b6f 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -202,7 +202,7 @@ is different from account lockout, which is provided by the pam_faillock module.
 <tested by="DS" on="20121024"/>
 </Rule>
 
-<Rule id="password_require_3consecrepeat">
+<Rule id="password_require_consecrepeat">
 <title>Set Password to Maximum of Three Consecutive Repeating Characters</title>
 <description>The pam_cracklib module's <tt>maxrepeat</tt> parameter controls requirements for
 consecutive repeating characters.  Edit the <tt>/etc/pam.d/system-auth</tt> file to include the following 
diff --git a/RHEL6/input/system/accounts/restrictions/root_logins.xml b/RHEL6/input/system/accounts/restrictions/root_logins.xml
index dcb9ab1..378fdd9 100644
--- a/RHEL6/input/system/accounts/restrictions/root_logins.xml
+++ b/RHEL6/input/system/accounts/restrictions/root_logins.xml
@@ -105,7 +105,6 @@ If a browser vulnerability is exploited while running with administrative privil
 the entire system could be compromised.  Specific exceptions for local service 
 administration should be documented in site-defined policy.
 </rationale>
-<ref disa="366" />
 </Rule>
 
 <Rule id="no_shelllogin_for_systemaccounts" severity="medium">
@@ -193,7 +192,6 @@ other than a slash (/).
 The root account's executable search path must be the vendor default, and must 
 contain only absolute paths.
 </rationale>
-<ref disa="366" />
 <tested by="DS" on="20121024"/>
 </Rule>
 
-- 
1.7.1



More information about the scap-security-guide mailing list