[PATCH] New Rule for RHEL-06-000029 -- Lock non-root system accounts
Maura Dailey
maura at eclipse.ncsc.mil
Fri Apr 25 19:23:11 UTC 2014
I'm jumping in here to restart this conversation. I can see that this
patch was not applied, but I can also see that there was some discussion
from Red Hat on whether a rule swap should take place. Leland, it seemed
like you agreed with the proposed swap, but what wasn't clear was if
your patch would have to be edited to match the proposed changes from
Red Hat or if you were waiting for someone else to push something out.
As of right now, the Rule "Ensure that System Accounts Do Not Run a
Shell Upon Login" still exists, as does the OVAL check
no_shelllogin_for_systemaccounts.xml.
- Maura Dailey
On 12/16/2013 01:36 PM, Steinke, Leland J Sr CTR DISA FSO (US) wrote:
>>>> Leland? Jeff?
>> .....Bueller? ;)
>>
>> But really, what do you think of this approach Leland (+Jeff?)?
> I submitted the patch, so I am for it. RHEL6's default operating system accounts are password-locked by default, so this just verifies what should already be in place.
>
>
> Thanks,
> Leland
>
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140425/42be2376/attachment.html>
More information about the scap-security-guide
mailing list