[PATCH 4/9] OVAL signoff no_empty_passwords [user at redhat-thing-1 checks]$ grep nullok /etc/pam.d/system-auth [user at redhat-thing-1 checks]$ ./testcheck.py no_empty_passwords.xml Evaluating with OVAL tempfile : /tmp/no_empty_passwordsLQqZsO.xml Writing results to : /tmp/no_empty_passwordsLQqZsO.xml-results Definition oval:scap-security-guide.testing:def:107: true Evaluation done. [user at redhat-thing-1 checks]$ vim /etc/pam.d/system-auth [user at redhat-thing-1 checks]$ grep nullok /etc/pam.d/system-auth auth sufficient pam_unix.so try_first_pass nullok [user at redhat-thing-1 checks]$ ./testcheck.py no_empty_passwords.xml Evaluating with OVAL tempfile : /tmp/no_empty_passwordsqFQIA5.xml Writing results to : /tmp/no_empty_passwordsqFQIA5.xml-results Definition oval:scap-security-guide.testing:def:107: false Evaluation done.

shawn at redhat.com shawn at redhat.com
Wed Sep 18 20:38:55 UTC 2013


From: Shawn Wells <shawn at redhat.com>

---
 RHEL6/input/checks/no_empty_passwords.xml |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/RHEL6/input/checks/no_empty_passwords.xml b/RHEL6/input/checks/no_empty_passwords.xml
index b2170b9..de52bed 100644
--- a/RHEL6/input/checks/no_empty_passwords.xml
+++ b/RHEL6/input/checks/no_empty_passwords.xml
@@ -6,6 +6,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The file /etc/pam.d/system-auth should not contain the nullok option</description>
+      <reference source="swells" ref_id="20130918" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion comment="make sure the nullok option is not used in /etc/pam.d/system-auth" test_ref="test_no_empty_passwords" />
-- 
1.7.1



More information about the scap-security-guide mailing list