[PATCH 07/11] Removed NIST AC-11 mapping for no_uidzero_except_root
Shawn Wells
shawn.d.wells at gmail.com
Thu Apr 25 06:17:18 UTC 2013
-------------- next part --------------
>From f4f4707501425d7df6104e1362159b00e1dea610 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Wed, 24 Apr 2013 05:34:48 -0400
Subject: [PATCH 07/11] Removed NIST AC-11 mapping for no_uidzero_except_root
The root user having UID 0 has nothing to do with screen locking. Removing NIST mapping.
---
.../system/accounts/restrictions/root_logins.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/RHEL6/input/system/accounts/restrictions/root_logins.xml b/RHEL6/input/system/accounts/restrictions/root_logins.xml
index 1ea6f5c..dd0e9ef 100644
--- a/RHEL6/input/system/accounts/restrictions/root_logins.xml
+++ b/RHEL6/input/system/accounts/restrictions/root_logins.xml
@@ -167,7 +167,7 @@ access to root privileges in an accountable manner.
</rationale>
<ident cce="26971-2" />
<oval id="accounts_no_uid_except_zero" />
-<ref nist="AC-6,AC-11" disa="366" />
+<ref nist="AC-6" disa="366" />
<tested by="DS" on="20121024"/>
</Rule>
--
1.7.1
More information about the scap-security-guide
mailing list