[PATCH 5/5] [bugfix] Unlinking cracklib checks from RHEL7

Shawn Wells shawn at redhat.com
Mon May 12 01:30:43 UTC 2014


As identified by Maura and Jan on 1-APR, RHEL7 doesn't use cracklib (but instead pam_pwquality). Removing the cracklib checks from RHEL7 now; longer term we'll review creating a consolidated check or net-new for RHEL7.

Signed-off-by: Shawn Wells <shawn at redhat.com>
---
 .../accounts_password_pam_cracklib_dcredit.xml     |    1 -
 .../accounts_password_pam_cracklib_difok.xml       |    1 -
 .../accounts_password_pam_cracklib_lcredit.xml     |    1 -
 .../accounts_password_pam_cracklib_ocredit.xml     |    1 -
 .../accounts_password_pam_cracklib_retry.xml       |    1 -
 .../accounts_password_pam_cracklib_ucredit.xml     |    1 -
 .../accounts_password_pam_cracklib_dcredit.xml     |    1 -
 .../accounts_password_pam_cracklib_lcredit.xml     |    1 -
 .../accounts_password_pam_cracklib_ocredit.xml     |    1 -
 .../oval/accounts_password_pam_cracklib_retry.xml  |    1 -
 .../accounts_password_pam_cracklib_ucredit.xml     |    1 -
 11 files changed, 0 insertions(+), 11 deletions(-)
 delete mode 120000 RHEL/7/input/checks/accounts_password_pam_cracklib_dcredit.xml
 delete mode 120000 RHEL/7/input/checks/accounts_password_pam_cracklib_difok.xml
 delete mode 120000 RHEL/7/input/checks/accounts_password_pam_cracklib_lcredit.xml
 delete mode 120000 RHEL/7/input/checks/accounts_password_pam_cracklib_ocredit.xml
 delete mode 120000 RHEL/7/input/checks/accounts_password_pam_cracklib_retry.xml
 delete mode 120000 RHEL/7/input/checks/accounts_password_pam_cracklib_ucredit.xml

diff --git a/RHEL/7/input/checks/accounts_password_pam_cracklib_dcredit.xml b/RHEL/7/input/checks/accounts_password_pam_cracklib_dcredit.xml
deleted file mode 120000
index 2c6ed77..0000000
--- a/RHEL/7/input/checks/accounts_password_pam_cracklib_dcredit.xml
+++ /dev/null
@@ -1 +0,0 @@
-../../../../shared/oval/accounts_password_pam_cracklib_dcredit.xml
\ No newline at end of file
diff --git a/RHEL/7/input/checks/accounts_password_pam_cracklib_difok.xml b/RHEL/7/input/checks/accounts_password_pam_cracklib_difok.xml
deleted file mode 120000
index ca78167..0000000
--- a/RHEL/7/input/checks/accounts_password_pam_cracklib_difok.xml
+++ /dev/null
@@ -1 +0,0 @@
-../../../../shared/oval/accounts_password_pam_cracklib_difok.xml
\ No newline at end of file
diff --git a/RHEL/7/input/checks/accounts_password_pam_cracklib_lcredit.xml b/RHEL/7/input/checks/accounts_password_pam_cracklib_lcredit.xml
deleted file mode 120000
index 7e6ba85..0000000
--- a/RHEL/7/input/checks/accounts_password_pam_cracklib_lcredit.xml
+++ /dev/null
@@ -1 +0,0 @@
-../../../../shared/oval/accounts_password_pam_cracklib_lcredit.xml
\ No newline at end of file
diff --git a/RHEL/7/input/checks/accounts_password_pam_cracklib_ocredit.xml b/RHEL/7/input/checks/accounts_password_pam_cracklib_ocredit.xml
deleted file mode 120000
index 6355aa0..0000000
--- a/RHEL/7/input/checks/accounts_password_pam_cracklib_ocredit.xml
+++ /dev/null
@@ -1 +0,0 @@
-../../../../shared/oval/accounts_password_pam_cracklib_ocredit.xml
\ No newline at end of file
diff --git a/RHEL/7/input/checks/accounts_password_pam_cracklib_retry.xml b/RHEL/7/input/checks/accounts_password_pam_cracklib_retry.xml
deleted file mode 120000
index 6480704..0000000
--- a/RHEL/7/input/checks/accounts_password_pam_cracklib_retry.xml
+++ /dev/null
@@ -1 +0,0 @@
-../../../../shared/oval/accounts_password_pam_cracklib_retry.xml
\ No newline at end of file
diff --git a/RHEL/7/input/checks/accounts_password_pam_cracklib_ucredit.xml b/RHEL/7/input/checks/accounts_password_pam_cracklib_ucredit.xml
deleted file mode 120000
index 7aa3ff4..0000000
--- a/RHEL/7/input/checks/accounts_password_pam_cracklib_ucredit.xml
+++ /dev/null
@@ -1 +0,0 @@
-../../../../shared/oval/accounts_password_pam_cracklib_ucredit.xml
\ No newline at end of file
diff --git a/shared/oval/accounts_password_pam_cracklib_dcredit.xml b/shared/oval/accounts_password_pam_cracklib_dcredit.xml
index b86836f..d0e8093 100644
--- a/shared/oval/accounts_password_pam_cracklib_dcredit.xml
+++ b/shared/oval/accounts_password_pam_cracklib_dcredit.xml
@@ -4,7 +4,6 @@
       <title>Set Password dcredit Requirements</title>
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
-        <platform>Red Hat Enterprise Linux 7</platform>
       </affected>
       <description>The password dcredit should meet minimum
       requirements using pam_cracklib</description>
diff --git a/shared/oval/accounts_password_pam_cracklib_lcredit.xml b/shared/oval/accounts_password_pam_cracklib_lcredit.xml
index bd0bb33..47306ec 100644
--- a/shared/oval/accounts_password_pam_cracklib_lcredit.xml
+++ b/shared/oval/accounts_password_pam_cracklib_lcredit.xml
@@ -4,7 +4,6 @@
       <title>Set Password lcredit Requirements</title>
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
-        <platform>Red Hat Enterprise Linux 7</platform>
       </affected>
       <description>The password lcredit should meet minimum
       requirements using pam_cracklib</description>
diff --git a/shared/oval/accounts_password_pam_cracklib_ocredit.xml b/shared/oval/accounts_password_pam_cracklib_ocredit.xml
index e4077ac..8a3c115 100644
--- a/shared/oval/accounts_password_pam_cracklib_ocredit.xml
+++ b/shared/oval/accounts_password_pam_cracklib_ocredit.xml
@@ -4,7 +4,6 @@
       <title>Set Password ocredit Requirements</title>
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
-        <platform>Red Hat Enterprise Linux 7</platform>
       </affected>
       <description>The password ocredit should meet minimum
       requirements using pam_cracklib</description>
diff --git a/shared/oval/accounts_password_pam_cracklib_retry.xml b/shared/oval/accounts_password_pam_cracklib_retry.xml
index 70f5a5b..175b55c 100644
--- a/shared/oval/accounts_password_pam_cracklib_retry.xml
+++ b/shared/oval/accounts_password_pam_cracklib_retry.xml
@@ -4,7 +4,6 @@
       <title>Set Password retry Requirements</title>
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
-        <platform>Red Hat Enterprise Linux 7</platform>
       </affected>
       <description>The password retry should meet minimum
       requirements using pam_cracklib</description>
diff --git a/shared/oval/accounts_password_pam_cracklib_ucredit.xml b/shared/oval/accounts_password_pam_cracklib_ucredit.xml
index 3d4de0e..e6151e7 100644
--- a/shared/oval/accounts_password_pam_cracklib_ucredit.xml
+++ b/shared/oval/accounts_password_pam_cracklib_ucredit.xml
@@ -4,7 +4,6 @@
       <title>Set Password ucredit Requirements</title>
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
-        <platform>Red Hat Enterprise Linux 7</platform>
       </affected>
       <description>The password ucredit should meet minimum
       requirements using pam_cracklib</description>
-- 
1.7.1



More information about the scap-security-guide mailing list