Whitelist 'postgres' user from OVAL check for CCE-26966-2 (2.4.1.1.e Ensure That System Accounts Do Not Run a Shell Upon Login)

Shawn Wells shawn at redhat.com
Tue Dec 10 18:21:30 UTC 2013


On 12/10/13, 9:41 AM, Steinke, Leland J Sr CTR DISA FSO (US) wrote:
> If the account is locked, rather than disabled via shell, this problem vanishes.


So are you saying we can finally remove CCE-26966-2, "Ensure that System 
Accounts Do Not Run a Shell Upon Login," from the STIG as it's known to 
break things? ;)

http://people.redhat.com/swells/scap-security-guide/RHEL6/output/rhel6-guide-custom.html#no_shelllogin_for_systemaccounts


More information about the scap-security-guide mailing list