[PATCH] [RHEL/6] Fix implementation of accounts_password_pam_cracklib_minclass OVAL check. Provide corresponding XCCDF definition & start using the rule.

Jan Lieskovsky jlieskov at redhat.com
Thu Jun 26 16:14:19 UTC 2014


The following patch:
  [1] https://git.fedorahosted.org/cgit/scap-security-guide.git/commit/?id=a38ece26a85f210b7edc6db2d91c438ef78f5add

added support for accounts_password_pam_cracklib_minclass OVAL check & corresponding remediation script.

But it got never used due to missing XCCDF definition. Therefore:
1) fix the accounts_password_pam_cracklib_minclass actual OVAL check implementation so it
   would be more aligned with existing accounts_password_* OVAL checks,
2) provide corresponding XCCDF definition for it & start using it.

Testing status:
---------------
The change has been tested on RHEL-6 & works as expected (=> added the test_attestation timestamp into
OVAL definition).

Please review.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team

P.S.: Will have a look at the corresponding remediation script yet to see if any updates are needed.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-RHEL-6-Fix-implementation-of-accounts_password_pam_c.patch
Type: text/x-patch
Size: 7123 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140626/2036cb1f/attachment.bin>


More information about the scap-security-guide mailing list