[PATCH 37/64] Changed default value of var_password_max_age from 90 to 60
Shawn Wells
shawn.d.wells at gmail.com
Fri Apr 26 02:14:53 UTC 2013
-------------- next part --------------
>From 3376fb5dbde1b49ed4fe93dd39ecca551f049bb4 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 19:32:08 -0400
Subject: [PATCH 37/64] Changed default value of var_password_max_age from 90 to 60
60 is default for DoD and FISMA, changing default of var_password_max_age to reflect.
This can be (of course) be over written in profiles, however reducing the need for
refine-values in STIG and FISMA profiles.
---
.../accounts/restrictions/password_expiration.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/RHEL6/input/system/accounts/restrictions/password_expiration.xml b/RHEL6/input/system/accounts/restrictions/password_expiration.xml
index 5372c13..910c5e8 100644
--- a/RHEL6/input/system/accounts/restrictions/password_expiration.xml
+++ b/RHEL6/input/system/accounts/restrictions/password_expiration.xml
@@ -46,7 +46,7 @@ age, and 7 day warning period with the following command:
<title>maximum password age</title>
<description>Maximum age of password in days</description>
<warning category="general">This will only apply to newly created accounts</warning>
-<value selector="">90</value>
+<value selector="">60</value>
<value selector="60">60</value>
<value selector="90">90</value>
<value selector="120">120</value>
--
1.7.1
More information about the scap-security-guide
mailing list