[PATCH 4/4] renamed a Rule, removed redundant CCI ref
Jeffrey Blank
blank at eclipse.ncsc.mil
Thu Oct 25 23:49:19 UTC 2012
Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
RHEL6/input/system/accounts/pam.xml | 2 +-
.../system/accounts/restrictions/root_logins.xml | 2 --
2 files changed, 1 insertions(+), 3 deletions(-)
diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index 28c50bf..3633b6f 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -202,7 +202,7 @@ is different from account lockout, which is provided by the pam_faillock module.
<tested by="DS" on="20121024"/>
</Rule>
-<Rule id="password_require_3consecrepeat">
+<Rule id="password_require_consecrepeat">
<title>Set Password to Maximum of Three Consecutive Repeating Characters</title>
<description>The pam_cracklib module's <tt>maxrepeat</tt> parameter controls requirements for
consecutive repeating characters. Edit the <tt>/etc/pam.d/system-auth</tt> file to include the following
diff --git a/RHEL6/input/system/accounts/restrictions/root_logins.xml b/RHEL6/input/system/accounts/restrictions/root_logins.xml
index dcb9ab1..378fdd9 100644
--- a/RHEL6/input/system/accounts/restrictions/root_logins.xml
+++ b/RHEL6/input/system/accounts/restrictions/root_logins.xml
@@ -105,7 +105,6 @@ If a browser vulnerability is exploited while running with administrative privil
the entire system could be compromised. Specific exceptions for local service
administration should be documented in site-defined policy.
</rationale>
-<ref disa="366" />
</Rule>
<Rule id="no_shelllogin_for_systemaccounts" severity="medium">
@@ -193,7 +192,6 @@ other than a slash (/).
The root account's executable search path must be the vendor default, and must
contain only absolute paths.
</rationale>
-<ref disa="366" />
<tested by="DS" on="20121024"/>
</Rule>
--
1.7.1
More information about the scap-security-guide
mailing list