[PATCH] Updated Smart Card XCCDF to reflect SSH+CAC docs

Trevor Vaughan tvaughan at onyxpoint.com
Mon Aug 11 10:43:08 UTC 2014


Hmm....for a public guide, shouldn't the solution be public as well?


On Thu, Aug 7, 2014 at 12:44 AM, Shawn Wells <shawn at redhat.com> wrote:

> Updated XCCDF to reflect location of vendor docs on integrating SSH+CAC
> cards
>
> Signed-off-by: Shawn Wells <shawn at redhat.com>
> ---
>  RHEL/6/input/system/accounts/physical.xml |    4 ++++
>  1 files changed, 4 insertions(+), 0 deletions(-)
>
> diff --git a/RHEL/6/input/system/accounts/physical.xml
> b/RHEL/6/input/system/accounts/physical.xml
> index c9d1958..db5fb66 100644
> --- a/RHEL/6/input/system/accounts/physical.xml
> +++ b/RHEL/6/input/system/accounts/physical.xml
> @@ -403,6 +403,10 @@ To enable smart card authentication, consult the
> documentation at:
>  <ul>
>  <li>
> https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html
> </li>
>  </ul>
> +For guidance on enabling SSH to authenticate against CAC cards, consult
> documentation at:
> +<ul>
> +<li>https://access.redhat.com/solutions/82273</li>
> +</ul>
>  </description>
>  <ocil clause="non-exempt accounts are not using CAC authentication">
>  Interview the SA to determine if all accounts not exempted by policy are
> --
> 1.7.1
>
> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/




-- 
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699
tvaughan at onyxpoint.com

-- This account not approved for unencrypted proprietary information --
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140811/c676fe81/attachment.html>


More information about the scap-security-guide mailing list