[PATCH] /etc/login.defs password rules - allow heading spaces, trailing comments. Start using shared version for maximum password age

Jan Lieskovsky jlieskov at redhat.com
Mon Apr 14 09:52:06 UTC 2014


Hello Shawn,

----- Original Message -----
> From: "Shawn Wells"
> Sent: Friday, April 11, 2014 6:13:50 PM
> 
> On 4/11/14, 10:33 AM, Jan Lieskovsky wrote:
> 
> Patch summary:
> 
>     [shared] Modify /etc/login.defs rules to allow heading spaces & trailing
>     comments
>     [shared] Move accounts_maximum_age_login_defs.xml to shared
>     [shared] Add Fedora 20 as another platform identifier for password
>     /etc/login.defs rules
>     [shared] Update test attestations timestamps for RHEL & Fedora (for
>     password /etc/login.defs rules)
>     [Fedora] Replace own copies of /etc/login.defs password OVAL checks with
>     the shared ones
>     [RHEL/6] Make a link for accounts_maximum_age_login_defs.xml from shared
>     [RHEL/7] Make a link for accounts_maximum_age_login_defs.xml from shared

..

> 
> Ack

Thanks, pushed.

> 
> Noticed you dropped F19 and replaced with F20. IIRC this was to drop support
> for older Fedora releases?

No, F19 is still supported as the CPE is recognized by the benchmark:
  https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/Fedora/input/guide.xml

SCAP Fedora content "support model" is aligned with Fedora-$release support model
(IOW it will be dropped only in moment Fedora-19 goes EOL).

> Absolutely no problems with that; just wanted to
> document the reason in the mailing list archives.

Just have a custom to add latest (released) Fedora release as content of <platform> tag into
/shared checks (since btw as of right now don't have Fedora-19 VM available I could test at).

Once have finished the USGCB proposals, will install Fedora-19 locally, go through
tests in /shared and update appropriate records (since the patches are tested on
all systems from RHEL-6 through RHEL-7 up to latest Rawhide versions, there's small
chance they wouldn't work on Fedora-19. But the stats to be complete, will finish / update
all Fedora-19 related ones [or vice-versa add Fedora-20 ones where only Fedora-19 ones present]
at once for /shared).

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team

> 
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> 


More information about the scap-security-guide mailing list