<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">I'm jumping in here to restart this
conversation. I can see that this patch was not applied, but I can
also see that there was some discussion from Red Hat on whether a
rule swap should take place. Leland, it seemed like you agreed
with the proposed swap, but what wasn't clear was if your patch
would have to be edited to match the proposed changes from Red Hat
or if you were waiting for someone else to push something out.<br>
<br>
As of right now, the Rule "Ensure that System Accounts Do Not Run
a Shell Upon Login" still exists, as does the OVAL check
no_shelllogin_for_systemaccounts.xml.<br>
<br>
- Maura Dailey<br>
<br>
On 12/16/2013 01:36 PM, Steinke, Leland J Sr CTR DISA FSO (US)
wrote:<br>
</div>
<blockquote
cite="mid:294970648F72F5468D5C8718139CA88005ACDEE8@umechphi.easf.csd.disa.mil"
type="cite">
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">Leland? Jeff?
</pre>
</blockquote>
</blockquote>
<pre wrap="">.....Bueller? ;)
But really, what do you think of this approach Leland (+Jeff?)?
</pre>
</blockquote>
<pre wrap="">
I submitted the patch, so I am for it. RHEL6's default operating system accounts are password-locked by default, so this just verifies what should already be in place.
Thanks,
Leland
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
scap-security-guide mailing list
<a class="moz-txt-link-abbreviated" href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a>
</pre>
</blockquote>
<br>
</body>
</html>