[PATCH 2/2] Fixed the oval id from accounts_passwords_pam_fail_interval to accounts_passwords_pam_faillock_fail_interval to be consistant.
Brian Millett
bmillett at gmail.com
Fri Jun 28 13:40:03 UTC 2013
Signed-off-by: Brian Millett <bmillett at gmail.com>
---
RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml | 4 ++--
RHEL6/input/system/accounts/pam.xml | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml b/RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml
index 79dedfa..78ea42e 100644
--- a/RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml
+++ b/RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml
@@ -8,8 +8,8 @@
<description>The number of allowed failed logins should be set correctly.</description>
</metadata>
<criteria>
- <criterion comment="default is set to 5" test_ref="test_accounts_passwords_pam_faillock_deny_system-auth" />
- <criterion comment="default is set to 5" test_ref="test_accounts_passwords_pam_faillock_deny_password-auth" />
+ <criterion comment="default is set to 3" test_ref="test_accounts_passwords_pam_faillock_deny_system-auth" />
+ <criterion comment="default is set to 3" test_ref="test_accounts_passwords_pam_faillock_deny_password-auth" />
</criteria>
</definition>
diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index f754743..a62d25a 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -485,7 +485,7 @@ Locking out user accounts after a number of incorrect attempts within a
specific period of time prevents direct password guessing attacks.
</rationale>
<ident cce="27215-3" />
-<oval id="accounts_passwords_pam_fail_interval" value="var_accounts_passwords_pam_faillock_fail_interval"/>
+<oval id="accounts_passwords_pam_faillock_fail_interval" value="var_accounts_passwords_pam_faillock_fail_interval"/>
<ref nist="AC-7(a)" disa="1452" />
</Rule>
--
1.8.2.1
More information about the scap-security-guide
mailing list