[PATCH] [Fedora] Fix typo in OVAL check for sshd disable empty passwords
Jan Lieskovsky
jlieskov at redhat.com
Mon Dec 16 15:09:29 UTC 2013
[Fedora] Fix typo in OVAL check for sshd disable empty passwords
When searching for 'PermitEmptyPasswords yes' regex in previous
version was too liberal (even case like:
# PermitEmptyPasswords yes
permitemptypasswords no
would match the \s+ expression, meaning corresponding OVAL object
wouldn't be found in the system, and test failed even in case it
should pass) =>
FAIL only in case there's explicit '(?i)\n\s*PermitEmptyPasswords\s+yes'
in /etc/ssh/sshd_config.
Please review.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fedora-Fix-typo-in-OVAL-check-for-sshd-disable-empty.patch
Type: text/x-patch
Size: 2286 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131216/2184ba47/attachment.bin>
More information about the scap-security-guide
mailing list