[PATCH 4/9] OVAL signoff no_empty_passwords [user at redhat-thing-1 checks]$ grep nullok /etc/pam.d/system-auth [user at redhat-thing-1 checks]$ ./testcheck.py no_empty_passwords.xml Evaluating with OVAL tempfile : /tmp/no_empty_passwordsLQqZsO.xml Writing results to : /tmp/no_empty_passwordsLQqZsO.xml-results Definition oval:scap-security-guide.testing:def:107: true Evaluation done. [user at redhat-thing-1 checks]$ vim /etc/pam.d/system-auth [user at redhat-thing-1 checks]$ grep nullok /etc/pam.d/system-auth auth sufficient pam_unix.so try_first_pass nullok [user at redhat-thing-1 checks]$ ./testcheck.py no_empty_passwords.xml Evaluating with OVAL tempfile : /tmp/no_empty_passwordsqFQIA5.xml Writing results to : /tmp/no_empty_passwordsqFQIA5.xml-results Definition oval:scap-security-guide.testing:def:107: false Evaluation done.
shawn at redhat.com
shawn at redhat.com
Wed Sep 18 20:38:55 UTC 2013
From: Shawn Wells <shawn at redhat.com>
---
RHEL6/input/checks/no_empty_passwords.xml | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/RHEL6/input/checks/no_empty_passwords.xml b/RHEL6/input/checks/no_empty_passwords.xml
index b2170b9..de52bed 100644
--- a/RHEL6/input/checks/no_empty_passwords.xml
+++ b/RHEL6/input/checks/no_empty_passwords.xml
@@ -6,6 +6,7 @@
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
<description>The file /etc/pam.d/system-auth should not contain the nullok option</description>
+ <reference source="swells" ref_id="20130918" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="make sure the nullok option is not used in /etc/pam.d/system-auth" test_ref="test_no_empty_passwords" />
--
1.7.1
More information about the scap-security-guide
mailing list