[PATCH 4/4] Added <refine-value> for STIG-specific value for failed login attempts.

Signed-off-by: Willy Santos <wsantos(a)redhat.com&gt; --- RHEL6/input/profiles/STIG-server.xml | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/RHEL6/input/profiles/STIG-server.xml b/RHEL6/input/profiles/STIG-server.xml index fa11c8e..fb7b235 100644 --- a/RHEL6/input/profiles/STIG-server.xml +++ b/RHEL6/input/profiles/STIG-server.xml @@ -42,4 +42,6 @@ <refine-value idref="password_history_retain_number" selector="24"/> <refine-value idref="var_password_max_age" selector="60"/> +<!-- from inherited Rule, deny_password_attempts --> +<refine-value idref="var_accounts_passwords_pam_faillock_deny" selector="3"/> </Profile> -- 1.7.7.6