On 9/30/12 12:38 AM, Michael J. McConachie wrote:
0004-Test-Tags-added-for-input-system-accounts-restrictio.patch
From d01fb270ec32c1f609eed5ff99c9a23d4fe2a7b5 Mon Sep 17 00:00:00 2001 From: Michael McConachiemichael@redhat.com Date: Sun, 30 Sep 2012 00:30:57 -0400 Subject: [PATCH 4/6] Test Tags added for input/system/accounts/restrictions/root_logins.xml
RHEL6/input/system/accounts/restrictions/root_logins.xml | 2 ++ 1 file changed, 2 insertions(+)
diff --git a/RHEL6/input/system/accounts/restrictions/root_logins.xml b/RHEL6/input/system/accounts/restrictions/root_logins.xml index b19bce7..f54c7e0 100644 --- a/RHEL6/input/system/accounts/restrictions/root_logins.xml +++ b/RHEL6/input/system/accounts/restrictions/root_logins.xml @@ -63,6 +63,7 @@ using the root account.
<ident cce="3485-0" /> <oval id="securetty_root_login_console_only" /> <ref nist="CM-6, CM-7" disa="770" /> +<tested by="MM" on="20120929"/> </Rule>
<Rule id="restrict_serial_port_logins"> @@ -89,6 +90,7 @@ using the root account. <ident cce="4256-4" /> <oval id="securetty_no_serial" /> <ref nist="AC-3, AC-6" disa="770" /> +<tested by="MM" on="20120929"/> </Rule>
<Rule id="no_shelllogin_for_systemaccounts"> -- 1.7.11.4
Ack
scap-security-guide@lists.fedorahosted.org