system auth password hashing algorithm can also be required right?

Jeremiah Jahn jeremiah at goodinassociates.com
Wed Aug 6 16:55:50 UTC 2014


awesome thanks, that's what I needed. must have just missed it somehow.

On Wed, Aug 6, 2014 at 9:42 AM, Gabe Alford <redhatrises at gmail.com> wrote:
> Hello Jeremiah,
>
> Here would be a good place
> https://fedorahosted.org/scap-security-guide/wiki/becomeadeveloper to show
> you how to generate a formatted patch file.
>
> You can request git push access (might take a while) or email the formatted
> patch file to the list so that one of us can push it.
>
> Thanks,
>
> Gabe
>
>
>
>
> On Wed, Aug 6, 2014 at 8:11 AM, Jeremiah Jahn
> <jeremiah at goodinassociates.com> wrote:
>>
>> Is there a place to indicate the format you would like bug patches to
>> be sent in? I'm happy to follow any guides you have to make your life
>> easier.
>>
>> On Tue, Aug 5, 2014 at 9:30 PM, Jeremiah Jahn
>> <jeremiah at goodinassociates.com> wrote:
>> > (please indicate if you need someone to push for you) ?
>> >
>> > not quite sure what you mean, so that's probably a yes...
>> >
>> > On Tue, Aug 5, 2014 at 6:35 PM, Shawn Wells <shawn at redhat.com> wrote:
>> >>
>> >> On 8/1/14, 4:35 PM, Jeremiah Jahn wrote:
>> >>>
>> >>> not just sufficient?
>> >>>
>> >>> diff --git a/shared/oval/set_password_hashing_algorithm_systemauth.xml
>> >>> b/shared/oval/set_password_hashing_algorithm_systemauth.xml
>> >>> index 8a5525e..2d71e8b 100644
>> >>> --- a/shared/oval/set_password_hashing_algorithm_systemauth.xml
>> >>> +++ b/shared/oval/set_password_hashing_algorithm_systemauth.xml
>> >>> @@ -20,7 +20,7 @@
>> >>>
>> >>>     <ind:textfilecontent54_object comment="check
>> >>> /etc/pam.d/system-auth
>> >>> for correct settings" id="object_pam_unix_sha512" version="1">
>> >>>       <ind:filepath>/etc/pam.d/system-auth</ind:filepath>
>> >>> -    <ind:pattern operation="pattern
>> >>>
>> >>>
>> >>> match">^[\s]*password[\s]+sufficient[\s]+pam_unix\.so[\s]+.*sha512.*$</ind:pattern>
>> >>> +    <ind:pattern operation="pattern
>> >>>
>> >>>
>> >>> match">^[\s]*password[\s]+(?:(?:required)|(?:sufficient))[\s]+pam_unix\.so[\s]+.*sha512.*$</ind:pattern>
>> >>>       <ind:instance datatype="int">1</ind:instance>
>> >>>     </ind:textfilecontent54_object>
>> >>
>> >>
>> >> Yes, absolutely. Ack
>> >>
>> >> (please indicate if you need someone to push for you)
>> >> --
>> >> SCAP Security Guide mailing list
>> >> scap-security-guide at lists.fedorahosted.org
>> >> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> >> https://github.com/OpenSCAP/scap-security-guide/
>> --
>> SCAP Security Guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> https://github.com/OpenSCAP/scap-security-guide/
>
>
>
> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/


More information about the scap-security-guide mailing list