[PATCH 05/11] Updated OVAL naming for accounts_password_pam_cracklib_dcredit

Shawn Wells shawn at redhat.com
Tue Nov 12 16:32:48 UTC 2013


-------------- next part --------------
>From e3675a72feac57701e86d2b1162d05d819010bda Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Sun, 10 Nov 2013 01:40:26 -0500
Subject: [PATCH 05/11] Updated OVAL naming for accounts_password_pam_cracklib_dcredit
 - Updated naming scheme to be consistent with accounts_password_*

---
 RHEL6/input/auxiliary/stig_overlay.xml      |    2 +-
 RHEL6/input/profiles/CS2.xml                |    2 +-
 RHEL6/input/profiles/common.xml             |    2 +-
 RHEL6/input/profiles/rht-ccp.xml            |    2 +-
 RHEL6/input/profiles/test.xml               |    2 +-
 RHEL6/input/profiles/usgcb-rhel6-server.xml |    2 +-
 RHEL6/input/system/accounts/pam.xml         |    2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/RHEL6/input/auxiliary/stig_overlay.xml b/RHEL6/input/auxiliary/stig_overlay.xml
index e47d427..0ab0708 100644
--- a/RHEL6/input/auxiliary/stig_overlay.xml
+++ b/RHEL6/input/auxiliary/stig_overlay.xml
@@ -129,7 +129,7 @@
 	<overlay owner="disastig" ruleid="XXXX" ownerid="RHEL-06-000054" disa="366" severity="low">
 		<title>Users must be warned 7 days in advance of password expiration.</title>
 	</overlay>
-	<overlay owner="disastig" ruleid="password_require_digits" ownerid="RHEL-06-000056" disa="194" severity="low">
+	<overlay owner="disastig" ruleid="accounts_password_pam_cracklib_dcredit" ownerid="RHEL-06-000056" disa="194" severity="low">
 		<title>The system must require passwords to contain at least one numeric character.</title>
 	</overlay>
 	<overlay owner="disastig" ruleid="password_require_uppercases" ownerid="RHEL-06-000057" disa="192" severity="low">
diff --git a/RHEL6/input/profiles/CS2.xml b/RHEL6/input/profiles/CS2.xml
index 302cf5b..b32b9d1 100644
--- a/RHEL6/input/profiles/CS2.xml
+++ b/RHEL6/input/profiles/CS2.xml
@@ -8,7 +8,7 @@
 <refine-value idref="var_accounts_minimum_age_login_defs" selector="1"/>
 <select idref="acounts_maximum_age_login_defs" selected="true"/>
 <refine-value idref="var_acounts_maximum_age_login_defs" selector="180"/>
-<select idref="password_require_digits" selected="true"/>
+<select idref="accounts_password_pam_cracklib_dcredit" selected="true"/>
 <select idref="password_require_uppercases" selected="true"/>
 <select idref="password_require_specials" selected="true"/>
 <select idref="password_require_lowercases" selected="true"/>
diff --git a/RHEL6/input/profiles/common.xml b/RHEL6/input/profiles/common.xml
index 5eda579..aa4ed08 100644
--- a/RHEL6/input/profiles/common.xml
+++ b/RHEL6/input/profiles/common.xml
@@ -52,7 +52,7 @@
 <select idref="accounts_maximum_age_login_defs" selected="true"/>
 <select idref="accounts_password_warn_age_login_defs" selected="true"/>
 <select idref="accounts_password_pam_cracklib_retry" selected="true"/>
-<select idref="password_require_digits" selected="true"/>
+<select idref="accounts_password_pam_cracklib_dcredit" selected="true"/>
 <select idref="password_require_uppercases" selected="true"/>
 <select idref="password_require_specials" selected="true"/>
 <select idref="password_require_lowercases" selected="true"/>
diff --git a/RHEL6/input/profiles/rht-ccp.xml b/RHEL6/input/profiles/rht-ccp.xml
index 959c4d0..550f3c3 100644
--- a/RHEL6/input/profiles/rht-ccp.xml
+++ b/RHEL6/input/profiles/rht-ccp.xml
@@ -55,7 +55,7 @@
 <select idref="accounts_maximum_age_login_defs" selected="true"/>
 <select idref="accounts_password_warn_age_login_defs" selected="true"/>
 <select idref="accounts_password_pam_cracklib_retry" selected="true"/>
-<select idref="password_require_digits" selected="true"/>
+<select idref="accounts_password_pam_cracklib_dcredit" selected="true"/>
 <select idref="password_require_uppercases" selected="true"/>
 <select idref="password_require_specials" selected="true"/>
 <select idref="password_require_lowercases" selected="true"/>
diff --git a/RHEL6/input/profiles/test.xml b/RHEL6/input/profiles/test.xml
index 21b5131..564dbb5 100644
--- a/RHEL6/input/profiles/test.xml
+++ b/RHEL6/input/profiles/test.xml
@@ -10,7 +10,7 @@
 <select idref="service_rsyslog_enabled" selected="true"/>
 <select idref="disable_vsftpd" selected="true"/>
 <select idref="set_selinux_state" selected="true"/>
-<select idref="password_require_digits" selected="true"/>
+<select idref="accounts_password_pam_cracklib_dcredit" selected="true"/>
 <select idref="tftpd_uses_secure_mode" selected="true"/>
 <select idref="set_system_login_banner" selected="true"/>
 <select idref="set_screensaver_inactivity_timeout" selected="true"/>
diff --git a/RHEL6/input/profiles/usgcb-rhel6-server.xml b/RHEL6/input/profiles/usgcb-rhel6-server.xml
index a736b04..8d68a5d 100644
--- a/RHEL6/input/profiles/usgcb-rhel6-server.xml
+++ b/RHEL6/input/profiles/usgcb-rhel6-server.xml
@@ -73,7 +73,7 @@
 <refine-value idref="var_password_pam_cracklib_retry" selector="3" />
 <select idref="accounts_password_pam_cracklib_retry" selected="true" />
 <refine-value idref="var_password_pam_cracklib_dcredit" selector="1" />
-<select idref="password_require_digits" selected="true" />
+<select idref="accounts_password_pam_cracklib_dcredit" selected="true" />
 <refine-value idref="var_password_pam_cracklib_ucredit" selector="1" />
 <select idref="password_require_uppercases" selected="true" />
 <refine-value idref="var_password_pam_cracklib_lcredit" selector="1" />
diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml
index 2ad6609..9d8155c 100644
--- a/RHEL6/input/system/accounts/pam.xml
+++ b/RHEL6/input/system/accounts/pam.xml
@@ -267,7 +267,7 @@ Passwords with excessive repeating characters may be more vulnerable to password
 <ref nist="IA-5(c)" disa="366"/>
 </Rule>
 
-<Rule id="password_require_digits">
+<Rule id="accounts_password_pam_cracklib_dcredit">
 <title>Set Password Strength Minimum Digit Characters</title>
 <description>The pam_cracklib module's <tt>dcredit</tt> parameter controls requirements for
 usage of digits in a password. When set to a negative number, any password will be required to
-- 
1.7.1



More information about the scap-security-guide mailing list