[PATCH] /etc/login.defs password rules - allow heading spaces, trailing comments. Start using shared version for maximum password age
Jan Lieskovsky
jlieskov at redhat.com
Mon Apr 14 09:52:06 UTC 2014
Hello Shawn,
----- Original Message -----
> From: "Shawn Wells"
> Sent: Friday, April 11, 2014 6:13:50 PM
>
> On 4/11/14, 10:33 AM, Jan Lieskovsky wrote:
>
> Patch summary:
>
> [shared] Modify /etc/login.defs rules to allow heading spaces & trailing
> comments
> [shared] Move accounts_maximum_age_login_defs.xml to shared
> [shared] Add Fedora 20 as another platform identifier for password
> /etc/login.defs rules
> [shared] Update test attestations timestamps for RHEL & Fedora (for
> password /etc/login.defs rules)
> [Fedora] Replace own copies of /etc/login.defs password OVAL checks with
> the shared ones
> [RHEL/6] Make a link for accounts_maximum_age_login_defs.xml from shared
> [RHEL/7] Make a link for accounts_maximum_age_login_defs.xml from shared
..
>
> Ack
Thanks, pushed.
>
> Noticed you dropped F19 and replaced with F20. IIRC this was to drop support
> for older Fedora releases?
No, F19 is still supported as the CPE is recognized by the benchmark:
https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/Fedora/input/guide.xml
SCAP Fedora content "support model" is aligned with Fedora-$release support model
(IOW it will be dropped only in moment Fedora-19 goes EOL).
> Absolutely no problems with that; just wanted to
> document the reason in the mailing list archives.
Just have a custom to add latest (released) Fedora release as content of <platform> tag into
/shared checks (since btw as of right now don't have Fedora-19 VM available I could test at).
Once have finished the USGCB proposals, will install Fedora-19 locally, go through
tests in /shared and update appropriate records (since the patches are tested on
all systems from RHEL-6 through RHEL-7 up to latest Rawhide versions, there's small
chance they wouldn't work on Fedora-19. But the stats to be complete, will finish / update
all Fedora-19 related ones [or vice-versa add Fedora-20 ones where only Fedora-19 ones present]
at once for /shared).
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>
More information about the scap-security-guide
mailing list