[PATCH 46/64] Mapped telnet and rsh to IA-5(1)(c)

Shawn Wells shawn.d.wells at gmail.com
Fri Apr 26 02:17:16 UTC 2013


-------------- next part --------------
>From 03236a96ad3563b9c769b42ece24fea892c57c17 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 20:20:44 -0400
Subject: [PATCH 46/64] Mapped telnet and rsh to IA-5(1)(c)
 IA-5(1)(c) calls for encrypted passwords, which isn't possible with telnet and rsh

---
 RHEL6/input/services/obsolete.xml |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/RHEL6/input/services/obsolete.xml b/RHEL6/input/services/obsolete.xml
index 4a310c7..8883caf 100644
--- a/RHEL6/input/services/obsolete.xml
+++ b/RHEL6/input/services/obsolete.xml
@@ -87,7 +87,7 @@ subject to man-in-the-middle attacks.
 </rationale>
 <ident cce="26836-7" />
 <oval id="service_telnetd_disabled" />
-<ref nist="AC-17(8),CM-7" disa="68,1436,197,877,888" />
+<ref nist="AC-17(8),CM-7,IA-5(1)(c)" disa="68,1436,197,877,888" />
 <tested by="DS" on="20121026"/>
 </Rule>
 
@@ -166,7 +166,7 @@ stolen by eavesdroppers on the network.
 </rationale>
 <ident cce="26994-4" />
 <oval id="service_rsh_disabled" />
-<ref nist="AC-17(8),CM-7" disa="68,1436" />
+<ref nist="AC-17(8),CM-7,IA-5(1)(c)" disa="68,1436" />
 <tested by="DS" on="20121026"/>
 </Rule>
 
@@ -185,7 +185,7 @@ stolen by eavesdroppers on the network.
 </rationale>
 <ident cce="26865-6" />
 <oval id="service_rlogin_disabled" />
-<ref nist="AC-17(8),CM-7" disa="1436" />
+<ref nist="AC-17(8),CM-7,IA-5(1)(c)" disa="1436" />
 <tested by="DS" on="20121026"/>
 </Rule>
 
-- 
1.7.1



More information about the scap-security-guide mailing list