[PATCH 4/9] OVAL signoff no_empty_passwords [user@redhat-thing-1 checks]$ grep nullok /etc/pam.d/system-auth [user@redhat-thing-1 checks]$ ./testcheck.py no_empty_passwords.xml Evaluating with OVAL tempfile : /tmp/no_empty_passwordsLQqZsO.xml Writing results to : /tmp/no_empty_passwordsLQqZsO.xml-results Definition oval:scap-security-guide.testing:def:107: true Evaluation done. [user@redhat-thing-1 checks]$ vim /etc/pam.d/system-auth [user@redhat-thing-1 checks]$ grep nullok /etc/pam.d/system-auth auth sufficient pam_unix.so try_first_pass nullok [user@redhat-thing-1 checks]$ ./testcheck.py no_empty_passwords.xml Evaluating with OVAL tempfile : /tmp/no_empty_passwordsqFQIA5.xml Writing results to : /tmp/no_empty_passwordsqFQIA5.xml-results Definition oval:scap-security-guide.testing:def:107: false Evaluation done.

[shawn]

From: Shawn Wells <sh...@redhat.com>

---
 RHEL6/input/checks/no_empty_passwords.xml |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/RHEL6/input/checks/no_empty_passwords.xml 
b/RHEL6/input/checks/no_empty_passwords.xml
index b2170b9..de52bed 100644
--- a/RHEL6/input/checks/no_empty_passwords.xml
+++ b/RHEL6/input/checks/no_empty_passwords.xml
@@ -6,6 +6,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The file /etc/pam.d/system-auth should not contain the 
nullok option</description>
+      <reference source="swells" ref_id="20130918" ref_url="test_attestation" 
/>
     </metadata>
     <criteria>
       <criterion comment="make sure the nullok option is not used in 
/etc/pam.d/system-auth" test_ref="test_no_empty_passwords" />
-- 
1.7.1

_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide