[PATCH] changed password history alt title for consistency
Shawn Wells
shawn at redhat.com
Wed Oct 31 17:49:05 UTC 2012
On 10/31/12 1:46 PM, David Smith wrote:
> Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
> ---
> RHEL6/input/auxiliary/alt-titles-stig.xml | 4 ++--
> 1 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/RHEL6/input/auxiliary/alt-titles-stig.xml b/RHEL6/input/auxiliary/alt-titles-stig.xml
> index 55e8de2..b7f36d5 100644
> --- a/RHEL6/input/auxiliary/alt-titles-stig.xml
> +++ b/RHEL6/input/auxiliary/alt-titles-stig.xml
> @@ -186,7 +186,7 @@ The system must disable accounts after three consecutive unsuccessful login atte
> The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes.
> </title>
> <title rule="limiting_password_reuse" shorttitle="Limit Password Reuse">
> -The system must prohibit the reuse of passwords within five iterations.
> +The system must prohibit the reuse of passwords within 24 iterations.
> </title>
> <title rule="max_concurrent_login_sessions" shorttitle="Limit the Number of Concurrent Login Sessions Allowed Per User">
> The system must limit users to 10 simultaneous system logins, or a site-defined number, in accordance with operational requirements.
> @@ -702,7 +702,7 @@ All files must be owned by a group.
> All GIDs referenced in /etc/passwd must be defined in /etc/group
> </title>
> <title rule="account_unique_name" shorttitle="All Accounts on the System Must Have Unique User or Account Names">
> -All Accounts on the System Must Have Unique User or Account Names
> +All accounts on the system must have unique user or account names
> </title>
> <title rule="password_require_consecrepeat" shorttitle="Set Password to Maximum of Three Consecutive Repeating Characters">
> The system must require passwords contain no more than three consecutive repeating characters.
Ack
More information about the scap-security-guide
mailing list