[PATCH 2/2] adding additional lockout Rules to STIG profile
Signed-off-by: Jeffrey Blank <blank(a)eclipse.ncsc.mil>
---
RHEL6/input/profiles/stig-rhel6-server.xml | 7 +++++++
1 files changed, 7 insertions(+), 0 deletions(-)
diff --git a/RHEL6/input/profiles/stig-rhel6-server.xml
b/RHEL6/input/profiles/stig-rhel6-server.xml
index af213d3..276e47b 100644
--- a/RHEL6/input/profiles/stig-rhel6-server.xml
+++ b/RHEL6/input/profiles/stig-rhel6-server.xml
@@ -83,6 +83,13 @@
<select idref="smartcard_auth" selected="true" />
+<select idref="expire_date_set" selected="true" />
+
+<select idref="deny_password_attempts_unlock_time" selected="true"
/>
+<refine-value idref="var_accounts_passwords_pam_faillock_unlock_time"
selector="100000000"/>
+<select idref="deny_password_attempts_fail_interval"
selected="true" />
+<refine-value idref="var_accounts_passwords_pam_faillock_fail_interval"
selector="900"/>
+
<!-- from inherited Rule, limiting_password_reuse -->
<refine-value idref="password_history_retain_number"
selector="24"/>
--
1.7.1