[PATCH 38/64] Additional refinement of IA-5 mappings to PAM

Shawn Wells shawn.d.wells at gmail.com
Fri Apr 26 02:15:05 UTC 2013


-------------- next part --------------
>From f66d5d632a46110710e989f1ed19d0972e654d41 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 19:39:18 -0400
Subject: [PATCH 38/64] Additional refinement of IA-5 mappings to PAM

---
 RHEL6/input/system/accounts/pam.xml |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index 8fa7c5e..dd460c9 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -243,7 +243,7 @@ is different from account lockout, which is provided by the pam_faillock module.
 </rationale>
 <ident cce="27123-9" />
 <oval id="accounts_password_pam_cracklib_retry" value="var_password_pam_cracklib_retry"/>
-<ref nist="IA-5" disa="1092" />
+<ref nist="IA-5(c)" disa="1092" />
 <tested by="DS" on="20121024"/>
 </Rule>
 
@@ -263,7 +263,7 @@ Look for the value of the <tt>maxrepeat</tt> parameter.  The DoD requirement is
 Passwords with excessive repeating characters may be more vulnerable to password-guessing attacks.
 </rationale>
 <ident cce="27227-8" />
-<ref disa="366"/>
+<ref nist="IA-5(c)" disa="366"/>
 </Rule>
 
 <Rule id="password_require_digits">
@@ -507,7 +507,7 @@ Preventing re-use of previous passwords helps ensure that a compromised password
 </rationale>
 <ident cce="26741-9" />
 <oval id="accounts_password_reuse_limit" value="password_history_retain_number" />
-<ref nist="IA-5" disa="200" />
+<ref nist="IA-5(f)" disa="200" />
 <tested by="DS" on="20121024"/>
 </Rule>
 </Group>
-- 
1.7.1



More information about the scap-security-guide mailing list