[PATCH 07/11] Removed NIST AC-11 mapping for no_uidzero_except_root

Shawn Wells shawn.d.wells at gmail.com
Thu Apr 25 06:17:18 UTC 2013


-------------- next part --------------
>From f4f4707501425d7df6104e1362159b00e1dea610 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Wed, 24 Apr 2013 05:34:48 -0400
Subject: [PATCH 07/11] Removed NIST AC-11 mapping for no_uidzero_except_root
 The root user having UID 0 has nothing to do with screen locking. Removing NIST mapping.

---
 .../system/accounts/restrictions/root_logins.xml   |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/system/accounts/restrictions/root_logins.xml b/RHEL6/input/system/accounts/restrictions/root_logins.xml
index 1ea6f5c..dd0e9ef 100644
--- a/RHEL6/input/system/accounts/restrictions/root_logins.xml
+++ b/RHEL6/input/system/accounts/restrictions/root_logins.xml
@@ -167,7 +167,7 @@ access to root privileges in an accountable manner.
 </rationale>
 <ident cce="26971-2" />
 <oval id="accounts_no_uid_except_zero" />
-<ref nist="AC-6,AC-11" disa="366" />
+<ref nist="AC-6" disa="366" />
 <tested by="DS" on="20121024"/>
 </Rule>
 
-- 
1.7.1



More information about the scap-security-guide mailing list