[PATCH 7/8] OVAL signoff - display_login_attempts
Shawn Wells
shawn at redhat.com
Sat Oct 26 03:28:39 UTC 2013
-------------- next part --------------
>From 2f13b0b7b99ad4821c9806ca119548293a6ad806 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Fri, 25 Oct 2013 23:26:04 -0400
Subject: [PATCH 7/8] OVAL signoff - display_login_attempts
---
RHEL6/input/checks/display_login_attempts.xml | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/RHEL6/input/checks/display_login_attempts.xml b/RHEL6/input/checks/display_login_attempts.xml
index a4a3143..c78f182 100644
--- a/RHEL6/input/checks/display_login_attempts.xml
+++ b/RHEL6/input/checks/display_login_attempts.xml
@@ -6,6 +6,7 @@
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
<description>Configure the system to notify users of last logon/access using pam_lastlog.</description>
+ <reference source="swells" ref_id="20131025" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="Conditions for pam_lastlog are satisfied" test_ref="test_display_login_attempts" />
@@ -17,8 +18,7 @@
</ind:textfilecontent54_test>
<ind:textfilecontent54_object id="obj_display_login_attempts" version="1">
- <ind:path>/etc/pam.d</ind:path>
- <ind:filename>system-auth</ind:filename>
+ <ind:filepath>/etc/pam.d/system-auth</ind:filepath>
<ind:pattern operation="pattern match">^\s*session\s+(required|requisite)?\s+pam_lastlog.so[\s\w\d\=]+showfailed</ind:pattern>
<ind:instance datatype="int" operation="equals">1</ind:instance>
</ind:textfilecontent54_object>
--
1.7.1
More information about the scap-security-guide
mailing list