[PATCH 2/2] Fixed the oval id from accounts_passwords_pam_fail_interval to accounts_passwords_pam_faillock_fail_interval to be consistant.

Brian Millett bmillett at gmail.com
Fri Jun 28 13:40:03 UTC 2013


Signed-off-by: Brian Millett <bmillett at gmail.com>
---
 RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml | 4 ++--
 RHEL6/input/system/accounts/pam.xml                         | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml b/RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml
index 79dedfa..78ea42e 100644
--- a/RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml
+++ b/RHEL6/input/checks/accounts_passwords_pam_faillock_deny.xml
@@ -8,8 +8,8 @@
       <description>The number of allowed failed logins should be set correctly.</description>
     </metadata>
     <criteria>
-      <criterion comment="default is set to 5" test_ref="test_accounts_passwords_pam_faillock_deny_system-auth" />
-      <criterion comment="default is set to 5" test_ref="test_accounts_passwords_pam_faillock_deny_password-auth" />
+      <criterion comment="default is set to 3" test_ref="test_accounts_passwords_pam_faillock_deny_system-auth" />
+      <criterion comment="default is set to 3" test_ref="test_accounts_passwords_pam_faillock_deny_password-auth" />
     </criteria>
   </definition>
 
diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index f754743..a62d25a 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -485,7 +485,7 @@ Locking out user accounts after a number of incorrect attempts within a
 specific period of time prevents direct password guessing attacks.
 </rationale>
 <ident cce="27215-3" />
-<oval id="accounts_passwords_pam_fail_interval" value="var_accounts_passwords_pam_faillock_fail_interval"/>
+<oval id="accounts_passwords_pam_faillock_fail_interval" value="var_accounts_passwords_pam_faillock_fail_interval"/>
 <ref nist="AC-7(a)" disa="1452" />
 </Rule>
 
-- 
1.8.2.1



More information about the scap-security-guide mailing list