[PATCH 0/2] checks for faillock.sh accounts passwords

Brian Millett bmillett at gmail.com
Fri Jun 28 13:40:01 UTC 2013


Added the checks for faillock unlock_tine and fail_interval as there was only the
check for faillock deny.

small change for the comment dealing with faillock deny default NOT being 5, but 3

Fixed (in my mind) a typo in RHEL6/input/system/accounts/pam.xml where the oval id for 
rule deny_password_attempts_fail_interval from accounts_passwords_pam_fail_interval to
accounts_passwords_pam_faillock_fail_interval.  This matches the oval id's for 
accounts_passwords_pam_faillock_deny and accounts_passwords_pam_faillock_unlock_time

Brian Millett (2):
  Added the checks for accounts_passwords_pam_fail_interval and
    accounts_passwords_pam_faillock_unlock_time as there was only the
    check for accounts_passwords_pam_faillock_deny
  Fixed the oval id from accounts_passwords_pam_fail_interval to
    accounts_passwords_pam_faillock_fail_interval to be consistant.

 .../accounts_passwords_pam_fail_interval.xml       | 49 ++++++++++++++++++++++
 .../accounts_passwords_pam_faillock_deny.xml       |  4 +-
 ...accounts_passwords_pam_faillock_unlock_time.xml | 49 ++++++++++++++++++++++
 RHEL6/input/system/accounts/pam.xml                |  2 +-
 4 files changed, 101 insertions(+), 3 deletions(-)
 create mode 100644 RHEL6/input/checks/accounts_passwords_pam_fail_interval.xml
 create mode 100644 RHEL6/input/checks/accounts_passwords_pam_faillock_unlock_time.xml

-- 
1.8.2.1



More information about the scap-security-guide mailing list