[PATCH 3/3] slight text modification

Shawn Wells shawn at redhat.com
Wed Oct 31 17:48:56 UTC 2012


On 10/31/12 1:46 PM, David Smith wrote:
> Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
> ---
>   .../accounts/restrictions/password_storage.xml     |    2 +-
>   1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/RHEL6/input/system/accounts/restrictions/password_storage.xml b/RHEL6/input/system/accounts/restrictions/password_storage.xml
> index 153a2d6..8222f67 100644
> --- a/RHEL6/input/system/accounts/restrictions/password_storage.xml
> +++ b/RHEL6/input/system/accounts/restrictions/password_storage.xml
> @@ -31,7 +31,7 @@ If this produces any output, it may be possible to log into accounts
>   with empty passwords.
>   </ocil>
>   <rationale>
> -If an account has an empty password, anybody may log in and
> +If an account has an empty password, anyone could log in and
>   run commands with the privileges of that account. Accounts with
>   empty passwords should never be used in operational
>   environments.
Ack


More information about the scap-security-guide mailing list