[PATCH 40/64] Remapped require_singleuser_auth
Shawn Wells
shawn.d.wells at gmail.com
Fri Apr 26 02:15:39 UTC 2013
-------------- next part --------------
>From 4c57c998267109d276e1a90816eb05c553aa797c Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 19:48:21 -0400
Subject: [PATCH 40/64] Remapped require_singleuser_auth
- Remapped to AU-2(1), which requires multifactor auth to root
first auth: grub password to modify boot
second auth: single user password
---
RHEL6/input/system/accounts/physical.xml | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/RHEL6/input/system/accounts/physical.xml b/RHEL6/input/system/accounts/physical.xml
index ebb7293..cce519d 100644
--- a/RHEL6/input/system/accounts/physical.xml
+++ b/RHEL6/input/system/accounts/physical.xml
@@ -105,7 +105,7 @@ and whether to enter single-user mode.
</rationale>
<ident cce="26911-8" />
<oval id="bootloader_password" />
-<ref nist="IA-2(1),IA-5" disa="213" />
+<ref nist="IA-2(1),IA-5(e)" disa="213" />
<tested by="DS" on="20121026"/>
</Rule>
@@ -136,7 +136,7 @@ by configuring the bootloader password.
</rationale>
<ident cce="27040-5" />
<oval id="singleuser_password" />
-<ref nist="IA-5" disa="213" />
+<ref nist="IA-2(1)" disa="213" />
<tested by="DS" on="20121024"/>
</Rule>
--
1.7.1
More information about the scap-security-guide
mailing list