Whitelist 'postgres' user from OVAL check for CCE-26966-2(2.4.1.1.e Ensure That System Accounts Do Not Run a Shell Upon Login)
Shawn Wells
shawn at redhat.com
Tue Dec 10 18:23:48 UTC 2013
On 12/10/13, 10:06 AM, peake at hipkllc.com wrote:
>
> I have experienced the same as Jan on my build that uses postgres.
>
>
> Leland, you are saying I can just lock the account, and it will pass
> the check? If so I will give this a try here, as I didn't even think
> of trying that.
>
You'll still get a fail on a STIG scan. The OVAL checks for the shell.
Here's the associated OVAL code:
https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/RHEL6/input/checks/no_shelllogin_for_systemaccounts.xml
More information about the scap-security-guide
mailing list