SSG 0.1-14-14 - deny_password_attempts
ssg fthfth
ssgtesting1 at yahoo.com
Fri Feb 14 19:17:27 UTC 2014
For SSGID Set Interval For Counting Failed Password Attempts - (CCE-27215-3), with the stig-rhel6-server profile selected from the SCAP stream, when run with SCC 3.1.1.1, may produce a false-positive on a RHEL6V1R2 complaint machine..
The SSG content checks maximum failed login attempts allowed in /etc/pam.d/system-auth and /etc/pam.d/password-auth.
The STIG checks /etc/pam.d/system-auth-ac
/etc/pam.d/system-auth-acĀ file is symlinked to /etc/pam.d/system-auth
Any changes made to /etc/pam.d/system-auth are overwritten when authconfig is run.
More information about the scap-security-guide
mailing list