Draft RHEL6 STIG Released! (UNCLASSIFIED)
Shawn Wells
shawn at redhat.com
Thu Feb 21 18:20:05 UTC 2013
On 2/21/13 9:34 AM, Shaw, Ray V CTR (US) wrote:
> Thanks. I'll be sure to report anything where I would like to see a change in the actual requirement to the DISA address.
>
> As a "for instance" for other cases, the prose for the password_min_age check appears to want this in login.defs:
>
> PASS_MIN_DAYS 1
>
> which is fine, and is what we have. But the actual check appears to be looking for a value of "7 or higher", so it fails (using both tools; based on your comments regarding SCC, I won't report anything that fails on SCC but passes with Open SCAP).
>
> I'm running into similar issues with the "gconftool-2" type rules, where I've run the indicated commands and they appear to have written to the appropriate places, but the checks are still failing. Should I just report things like that here?
Any chance you could open a ticket (or two) on these?
https://fedorahosted.org/scap-security-guide/newticket
Under the "Milestone" piece please select "RHEL6 STIG - IntialDraft...."
This will help ensure we don't lose sight of it :)
More information about the scap-security-guide
mailing list