[PATCH 53/64] Mapped IA-7 to Password Hashing and FIPS

Shawn Wells shawn.d.wells at gmail.com
Fri Apr 26 02:19:31 UTC 2013


-------------- next part --------------
>From 9f11a6f6824285d24af98a56973688ddc5c46af1 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 20:51:27 -0400
Subject: [PATCH 53/64] Mapped IA-7 to Password Hashing and FIPS
 IA-7 requires FIPS 140-2 crypto and password hashes

---
 RHEL6/input/services/ssh.xml        |    2 +-
 RHEL6/input/system/accounts/pam.xml |    6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/RHEL6/input/services/ssh.xml b/RHEL6/input/services/ssh.xml
index b5e0ef7..59330ab 100644
--- a/RHEL6/input/services/ssh.xml
+++ b/RHEL6/input/services/ssh.xml
@@ -363,7 +363,7 @@ implementation. These are also required for compliance.
 </rationale>
 <ident cce="26555-3" />
 <oval id="sshd_use_approved_ciphers" />
-<ref nist="AC-3,AC-17(2),AU-10(5),IA-5(1)(c)" disa="803,1144,1145,1146" />
+<ref nist="AC-3,AC-17(2),AU-10(5),IA-5(1)(c),IA-7" disa="803,1144,1145,1146" />
 <tested by="DS" on="20121024"/>
 </Rule>
 
diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index f9b6435..ee18189 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -541,7 +541,7 @@ Using a stronger hashing algorithm makes password cracking attacks more difficul
 </rationale>
 <ident cce="26303-8" />
 <!-- <oval id="accounts_password_hashing_algorithm" /> -->
-<ref nist="IA-5(b),IA-5(c),IA-5(1)(c)" disa="803"/>
+<ref nist="IA-5(b),IA-5(c),IA-5(1)(c),IA-7" disa="803"/>
 <tested by="DS" on="20121024"/>
 <oval id="set_password_hashing_algorithm_systemauth" />
 </Rule>
@@ -562,7 +562,7 @@ Using a stronger hashing algorithm makes password cracking attacks more difficul
 </rationale>
 <!-- <oval id="accounts_password_hashing_algorithm" /> -->
 <ident cce="27228-6" />
-<ref nist="IA-5(b),IA-5(c),IA-5(1)(c)" disa="803"/>
+<ref nist="IA-5(b),IA-5(c),IA-5(1)(c),IA-7" disa="803"/>
 <tested by="DS" on="20121024"/>
 <oval id="set_password_hashing_algorithm_logindefs" />
 </Rule>
@@ -585,7 +585,7 @@ Using a stronger hashing algorithm makes password cracking attacks more difficul
 </rationale>
 <!-- <oval id="accounts_password_hashing_algorithm" /> -->
 <ident cce="27229-4" />
-<ref nist="IA-5(b),IA-5(c),IA-5(1)(c)" disa="803"/>
+<ref nist="IA-5(b),IA-5(c),IA-5(1)(c),IA-7" disa="803"/>
 <tested by="DS" on="20121026"/>
 <oval id="set_password_hashing_algorithm_libuserconf" />
 </Rule>
-- 
1.7.1



More information about the scap-security-guide mailing list