[PATCH] [Fedora] Fix typo in OVAL check for sshd disable empty passwords

Maura Dailey maura at eclipse.ncsc.mil
Mon Dec 16 17:10:57 UTC 2013


On 12/16/2013 11:45 AM, Shawn Wells wrote:
> On 12/16/13, 10:09 AM, Jan Lieskovsky wrote:
>> -    <ind:pattern operation="pattern 
>> match">^(?i)(?:(?!\s+PermitEmptyPasswords\s+yes).)*(\n\s*PermitEmptyPasswords\s+no)(.*)$</ind:pattern>
>> +    <ind:pattern operation="pattern 
>> match">^(?i)(?:(?!\n\s*PermitEmptyPasswords\s+yes).)*(\n\s*PermitEmptyPasswords\s+no)(.*)$</ind:pattern>
>
>
> This is likely in the RHEL6 content too. To address both Fedora & 
> RHEL, could this check be moved to shared/ and symlinked?
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

The pattern operation line is completely different in the RHEL version:

<ind:pattern operation="pattern 
match">^[\s]*(?i)PermitEmptyPasswords[\s]+no[\s]*$</ind:pattern>

- Maura Dailey


More information about the scap-security-guide mailing list