[PATCH 42/64] Added mapping to IA-5(1)(b) for password_require_diffchars

Shawn Wells shawn.d.wells at gmail.com
Fri Apr 26 02:16:09 UTC 2013


-------------- next part --------------
>From 1012b4b6d5a68ae15045de0336b0b2461c54c5f5 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 20:08:50 -0400
Subject: [PATCH 42/64] Added mapping to IA-5(1)(b) for password_require_diffchars
 FISMA requires >= 1 char different, mapping to IA-5(1)(b)
 Also updated FISMA selector=1

---
 RHEL6/input/system/accounts/pam.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index 29d5c5c..fdda966 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -388,7 +388,7 @@ Note that passwords which are changed on compromised systems will still be compr
 </rationale>
 <ident cce="26615-5" />
 <oval id="accounts_password_pam_cracklib_difok" value="var_password_pam_cracklib_difok"/>
-<ref nist="IA-5(b),IA-5(c)" disa="195"/>
+<ref nist="IA-5(b),IA-5(c),IA-5(1)(b)" disa="195"/>
 <tested by="DS" on="20121024"/>
 </Rule>
 </Group>
-- 
1.7.1



More information about the scap-security-guide mailing list