On 8/31/12 3:02 PM, Steve Grubb wrote:
On Friday, August 31, 2012 02:48:24 PM Kenneth Stailey wrote:
> Is it better to change /etc/shadow and gshadow to 0400
> or use the mode 0 that the files are distributed from Red Hat with?
Use the mode RHEL6 is shipped with. Its more restrictive.
-Steve
Also note those CCE's are for RHEL5 [buried in
cce.mitre.org/lists/data/downloads/cce-rhel5-5.20111007.xls ]. We
inherited them when creating the initial port/update of the SSG from
RHEL5 to RHEL6... eventually RHEL6 CCEs will be created.