Whitelist 'postgres' user from OVAL check for CCE-26966-2(2.4.1.1.e Ensure That System Accounts Do Not Run a Shell Upon Login)

Shawn Wells shawn at redhat.com
Tue Dec 10 18:23:48 UTC 2013


On 12/10/13, 10:06 AM, peake at hipkllc.com wrote:
>
> I have experienced the same as Jan on my build that uses postgres.
>
>
> Leland,  you are saying I can just lock the account, and it will pass 
> the check? If so I will give this a try here, as I didn't even think 
> of trying that.
>


You'll still get a fail on a STIG scan. The OVAL checks for the shell. 
Here's the associated OVAL code:
https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/RHEL6/input/checks/no_shelllogin_for_systemaccounts.xml


More information about the scap-security-guide mailing list