Whitelist 'postgres' user from OVAL check for CCE-26966-2 (2.4.1.1.e Ensure That System Accounts Do Not Run a Shell Upon Login)
Shawn Wells
shawn at redhat.com
Tue Dec 10 18:21:30 UTC 2013
On 12/10/13, 9:41 AM, Steinke, Leland J Sr CTR DISA FSO (US) wrote:
> If the account is locked, rather than disabled via shell, this problem vanishes.
So are you saying we can finally remove CCE-26966-2, "Ensure that System
Accounts Do Not Run a Shell Upon Login," from the STIG as it's known to
break things? ;)
http://people.redhat.com/swells/scap-security-guide/RHEL6/output/rhel6-guide-custom.html#no_shelllogin_for_systemaccounts
More information about the scap-security-guide
mailing list