[PATCH] resubmit - Updated Smart Card XCCDF to reflect SSH+CAC docs

David Smith dsmith at secure-innovations.net
Thu Aug 7 20:55:26 UTC 2014


ack


On Thu, Aug 7, 2014 at 4:50 PM, Shawn Wells <shawn at redhat.com> wrote:

> - Added link to vendor docs
> - bolded links
> - "CAC cards" was redundant
>
> Signed-off-by: Shawn Wells <shawn at redhat.com>
> ---
>  RHEL/6/input/system/accounts/physical.xml |    6 +++++-
>  1 files changed, 5 insertions(+), 1 deletions(-)
>
> diff --git a/RHEL/6/input/system/accounts/physical.xml
> b/RHEL/6/input/system/accounts/physical.xml
> index c9d1958..71a7bef 100644
> --- a/RHEL/6/input/system/accounts/physical.xml
> +++ b/RHEL/6/input/system/accounts/physical.xml
> @@ -401,7 +401,11 @@ is not enabled by default and must be enabled in the
> system settings.
>  <description>
>  To enable smart card authentication, consult the documentation at:
>  <ul>
> -<li>
> https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html
> </li>
> +<li><b>
> https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html
> </b></li>
> +</ul>
> +For guidance on enabling SSH to authenticate against a Common Access Card
> (CAC), consult documentation at:
> +<ul>
> +<li><b>https://access.redhat.com/solutions/82273</b></li>
>  </ul>
>  </description>
>  <ocil clause="non-exempt accounts are not using CAC authentication">
> --
> 1.7.1
>
> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/




-- 
David Smith
Sr. Information Security Engineer
Secure Innovations, LLC
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140807/8fbe4266/attachment.html>


More information about the scap-security-guide mailing list