<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 8/31/12 3:02 PM, Steve Grubb wrote:<br>
</div>
<blockquote cite="mid:1666310.I5I8FDukp3@x2" type="cite">
<pre wrap="">On Friday, August 31, 2012 02:48:24 PM Kenneth Stailey wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Is it better to change /etc/shadow and gshadow to 0400
or use the mode 0 that the files are distributed from Red Hat with?
</pre>
</blockquote>
<pre wrap="">
Use the mode RHEL6 is shipped with. Its more restrictive.
-Steve</pre>
</blockquote>
<br>
Also note those CCE's are for RHEL5 [buried in
cce.mitre.org/lists/data/downloads/cce-rhel5-5.20111007.xls
<meta charset="utf-8">
]. We inherited them when creating the initial port/update of the
SSG from RHEL5 to RHEL6... eventually RHEL6 CCEs will be created.<br>
</body>
</html>