[PATCH 37/64] Changed default value of var_password_max_age from 90 to 60

Shawn Wells shawn.d.wells at gmail.com
Fri Apr 26 02:14:53 UTC 2013


-------------- next part --------------
>From 3376fb5dbde1b49ed4fe93dd39ecca551f049bb4 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 19:32:08 -0400
Subject: [PATCH 37/64] Changed default value of var_password_max_age from 90 to 60
 60 is default for DoD and FISMA, changing default of var_password_max_age to reflect.
 This can be (of course) be over written in profiles, however reducing the need for
 refine-values in STIG and FISMA profiles.

---
 .../accounts/restrictions/password_expiration.xml  |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/system/accounts/restrictions/password_expiration.xml b/RHEL6/input/system/accounts/restrictions/password_expiration.xml
index 5372c13..910c5e8 100644
--- a/RHEL6/input/system/accounts/restrictions/password_expiration.xml
+++ b/RHEL6/input/system/accounts/restrictions/password_expiration.xml
@@ -46,7 +46,7 @@ age, and 7 day warning period with the following command:
 <title>maximum password age</title>
 <description>Maximum age of password in days</description>
 <warning category="general">This will only apply to newly created accounts</warning>
-<value selector="">90</value>
+<value selector="">60</value>
 <value selector="60">60</value>
 <value selector="90">90</value>
 <value selector="120">120</value>
-- 
1.7.1



More information about the scap-security-guide mailing list