[PATCH 40/64] Remapped require_singleuser_auth

Shawn Wells shawn.d.wells at gmail.com
Fri Apr 26 02:15:39 UTC 2013


-------------- next part --------------
>From 4c57c998267109d276e1a90816eb05c553aa797c Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 19:48:21 -0400
Subject: [PATCH 40/64] Remapped require_singleuser_auth
 - Remapped to AU-2(1), which requires multifactor auth to root
 first auth: grub password to modify boot
 second auth: single user password

---
 RHEL6/input/system/accounts/physical.xml |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/system/accounts/physical.xml b/RHEL6/input/system/accounts/physical.xml
index ebb7293..cce519d 100644
--- a/RHEL6/input/system/accounts/physical.xml
+++ b/RHEL6/input/system/accounts/physical.xml
@@ -105,7 +105,7 @@ and whether to enter single-user mode.
 </rationale>
 <ident cce="26911-8" />
 <oval id="bootloader_password" />
-<ref nist="IA-2(1),IA-5" disa="213" />
+<ref nist="IA-2(1),IA-5(e)" disa="213" />
 <tested by="DS" on="20121026"/>
 </Rule>
 
@@ -136,7 +136,7 @@ by configuring the bootloader password.
 </rationale>
 <ident cce="27040-5" />
 <oval id="singleuser_password" />
-<ref nist="IA-5" disa="213" />
+<ref nist="IA-2(1)" disa="213" />
 <tested by="DS" on="20121024"/>
 </Rule>
 
-- 
1.7.1



More information about the scap-security-guide mailing list