SSG 0.1-14-14 - deny_password_attempts

ssg fthfth ssgtesting1 at yahoo.com
Fri Feb 14 19:17:27 UTC 2014


For SSGID Set Interval For Counting Failed Password Attempts - (CCE-27215-3), with the stig-rhel6-server profile selected from the SCAP stream, when run with SCC 3.1.1.1, may produce a false-positive on a RHEL6V1R2 complaint machine..
The SSG content checks maximum failed login attempts allowed in /etc/pam.d/system-auth and /etc/pam.d/password-auth.
The STIG checks /etc/pam.d/system-auth-ac
/etc/pam.d/system-auth-acĀ  file is symlinked to /etc/pam.d/system-auth
Any changes made to /etc/pam.d/system-auth are overwritten when authconfig is run.



More information about the scap-security-guide mailing list