[PATCH 42/64] Added mapping to IA-5(1)(b) for password_require_diffchars
Shawn Wells
shawn.d.wells at gmail.com
Fri Apr 26 02:16:09 UTC 2013
-------------- next part --------------
>From 1012b4b6d5a68ae15045de0336b0b2461c54c5f5 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 20:08:50 -0400
Subject: [PATCH 42/64] Added mapping to IA-5(1)(b) for password_require_diffchars
FISMA requires >= 1 char different, mapping to IA-5(1)(b)
Also updated FISMA selector=1
---
RHEL6/input/system/accounts/pam.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index 29d5c5c..fdda966 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -388,7 +388,7 @@ Note that passwords which are changed on compromised systems will still be compr
</rationale>
<ident cce="26615-5" />
<oval id="accounts_password_pam_cracklib_difok" value="var_password_pam_cracklib_difok"/>
-<ref nist="IA-5(b),IA-5(c)" disa="195"/>
+<ref nist="IA-5(b),IA-5(c),IA-5(1)(b)" disa="195"/>
<tested by="DS" on="20121024"/>
</Rule>
</Group>
--
1.7.1
More information about the scap-security-guide
mailing list