[PATCH] [Fedora] Fix typo in OVAL check for sshd disable empty passwords

Jan Lieskovsky jlieskov at redhat.com
Mon Dec 16 15:09:29 UTC 2013


[Fedora] Fix typo in OVAL check for sshd disable empty passwords

When searching for 'PermitEmptyPasswords yes' regex in previous
version was too liberal (even case like:

# PermitEmptyPasswords yes
permitemptypasswords no

would match the \s+ expression, meaning corresponding OVAL object
wouldn't be found in the system, and test failed even in case it
should pass) =>

FAIL only in case there's explicit '(?i)\n\s*PermitEmptyPasswords\s+yes'
in /etc/ssh/sshd_config.

Please review.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fedora-Fix-typo-in-OVAL-check-for-sshd-disable-empty.patch
Type: text/x-patch
Size: 2286 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131216/2184ba47/attachment.bin>


More information about the scap-security-guide mailing list