[PATCH] password file entries for accounts with UID 0

Michael McConachie michael at redhat.com
Wed Sep 26 05:40:49 UTC 2012


---
 RHEL6/input/system/accounts/restrictions/root_logins.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/RHEL6/input/system/accounts/restrictions/root_logins.xml b/RHEL6/input/system/accounts/restrictions/root_logins.xml
index fee9a54..b19bce7 100644
--- a/RHEL6/input/system/accounts/restrictions/root_logins.xml
+++ b/RHEL6/input/system/accounts/restrictions/root_logins.xml
@@ -138,7 +138,7 @@ If any account other than root has a UID of 0,
 this misconfiguration should be investigated and the
 accounts other than root should be removed or have their UID changed.
 </description>
-<ocil>
+<ocil clause="any other accounts, other than root have an ID of 0">
 To list all password file entries for
 accounts with UID 0:
 <pre># awk -F: '($3 == "0") {print}' /etc/passwd</pre>
-- 
1.7.11.4


--BXVAT5kNtrzKuDFl--


More information about the scap-security-guide mailing list