[PATCH 53/64] Mapped IA-7 to Password Hashing and FIPS
Shawn Wells
shawn.d.wells at gmail.com
Fri Apr 26 02:19:31 UTC 2013
-------------- next part --------------
>From 9f11a6f6824285d24af98a56973688ddc5c46af1 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 20:51:27 -0400
Subject: [PATCH 53/64] Mapped IA-7 to Password Hashing and FIPS
IA-7 requires FIPS 140-2 crypto and password hashes
---
RHEL6/input/services/ssh.xml | 2 +-
RHEL6/input/system/accounts/pam.xml | 6 +++---
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/RHEL6/input/services/ssh.xml b/RHEL6/input/services/ssh.xml
index b5e0ef7..59330ab 100644
--- a/RHEL6/input/services/ssh.xml
+++ b/RHEL6/input/services/ssh.xml
@@ -363,7 +363,7 @@ implementation. These are also required for compliance.
</rationale>
<ident cce="26555-3" />
<oval id="sshd_use_approved_ciphers" />
-<ref nist="AC-3,AC-17(2),AU-10(5),IA-5(1)(c)" disa="803,1144,1145,1146" />
+<ref nist="AC-3,AC-17(2),AU-10(5),IA-5(1)(c),IA-7" disa="803,1144,1145,1146" />
<tested by="DS" on="20121024"/>
</Rule>
diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index f9b6435..ee18189 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -541,7 +541,7 @@ Using a stronger hashing algorithm makes password cracking attacks more difficul
</rationale>
<ident cce="26303-8" />
<!-- <oval id="accounts_password_hashing_algorithm" /> -->
-<ref nist="IA-5(b),IA-5(c),IA-5(1)(c)" disa="803"/>
+<ref nist="IA-5(b),IA-5(c),IA-5(1)(c),IA-7" disa="803"/>
<tested by="DS" on="20121024"/>
<oval id="set_password_hashing_algorithm_systemauth" />
</Rule>
@@ -562,7 +562,7 @@ Using a stronger hashing algorithm makes password cracking attacks more difficul
</rationale>
<!-- <oval id="accounts_password_hashing_algorithm" /> -->
<ident cce="27228-6" />
-<ref nist="IA-5(b),IA-5(c),IA-5(1)(c)" disa="803"/>
+<ref nist="IA-5(b),IA-5(c),IA-5(1)(c),IA-7" disa="803"/>
<tested by="DS" on="20121024"/>
<oval id="set_password_hashing_algorithm_logindefs" />
</Rule>
@@ -585,7 +585,7 @@ Using a stronger hashing algorithm makes password cracking attacks more difficul
</rationale>
<!-- <oval id="accounts_password_hashing_algorithm" /> -->
<ident cce="27229-4" />
-<ref nist="IA-5(b),IA-5(c),IA-5(1)(c)" disa="803"/>
+<ref nist="IA-5(b),IA-5(c),IA-5(1)(c),IA-7" disa="803"/>
<tested by="DS" on="20121026"/>
<oval id="set_password_hashing_algorithm_libuserconf" />
</Rule>
--
1.7.1
More information about the scap-security-guide
mailing list