|
 |
2b7fd2 |
From 51b6c4c3476608e298c65d402f6d897f1dd6b1aa Mon Sep 17 00:00:00 2001
|
|
|
2b7fd2 |
From: Watson Sato <wsato@redhat.com>
|
|
|
2b7fd2 |
Date: Wed, 10 Apr 2019 17:57:39 +0200
|
|
|
2b7fd2 |
Subject: [PATCH] Set various platform package CPE
|
|
|
2b7fd2 |
|
|
|
2b7fd2 |
---
|
|
|
0d5c10 |
.../accounts_password_pam_maxrepeat/rule.yml | 2 ++
|
|
|
0d5c10 |
.../accounts-session/accounts_have_homedir_login_defs/rule.yml | 2 ++
|
|
|
0d5c10 |
.../restrictions/coredumps/disable_users_coredumps/rule.yml | 2 ++
|
|
|
2b7fd2 |
3 files changed, 6 insertions(+)
|
|
|
2b7fd2 |
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_maxrepeat/rule.yml b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_maxrepeat/rule.yml
|
|
|
2b7fd2 |
index d23b1d99d0..925288b4f3 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_maxrepeat/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_maxrepeat/rule.yml
|
|
|
2b7fd2 |
@@ -46,3 +46,5 @@ ocil: |-
|
|
|
2b7fd2 |
$ grep maxrepeat /etc/security/pwquality.conf
|
|
|
2b7fd2 |
Look for the value of the <tt>maxrepeat</tt> parameter. The DoD requirement is 3, which would appear as
|
|
|
2b7fd2 |
<tt>maxrepeat=3</tt>.
|
|
|
2b7fd2 |
+
|
|
|
2b7fd2 |
+platform: pam
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_have_homedir_login_defs/rule.yml b/linux_os/guide/system/accounts/accounts-session/accounts_have_homedir_login_defs/rule.yml
|
|
|
2b7fd2 |
index 300f409ca3..215565460c 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/accounts/accounts-session/accounts_have_homedir_login_defs/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_have_homedir_login_defs/rule.yml
|
|
|
2b7fd2 |
@@ -32,3 +32,5 @@ ocil: |-
|
|
|
2b7fd2 |
|
|
|
2b7fd2 |
$ sudo grep create_home /etc/login.defs
|
|
|
2b7fd2 |
|
|
|
2b7fd2 |
+
|
|
|
2b7fd2 |
+platform: shadow-utils
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/permissions/restrictions/coredumps/disable_users_coredumps/rule.yml b/linux_os/guide/system/permissions/restrictions/coredumps/disable_users_coredumps/rule.yml
|
|
|
2b7fd2 |
index 99c2521afa..0e30d0d7ee 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/permissions/restrictions/coredumps/disable_users_coredumps/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/permissions/restrictions/coredumps/disable_users_coredumps/rule.yml
|
|
|
2b7fd2 |
@@ -37,3 +37,5 @@ ocil: |-
|
|
|
2b7fd2 |
$ grep core /etc/security/limits.conf
|
|
|
2b7fd2 |
The output should be:
|
|
|
2b7fd2 |
* hard core 0
|
|
|
2b7fd2 |
+
|
|
|
2b7fd2 |
+platform: pam
|