|
 |
fe0dde |
From f643b41c96c3551cdd6035f77e95c49c6f74e5ed Mon Sep 17 00:00:00 2001
|
|
|
fe0dde |
From: Gabriel Becker <ggasparb@redhat.com>
|
|
|
fe0dde |
Date: Tue, 15 Sep 2020 17:33:30 +0200
|
|
|
fe0dde |
Subject: [PATCH] Update accounts_tmout rule with regards to latest RHEL7 STIG
|
|
|
fe0dde |
revision.
|
|
|
fe0dde |
|
|
|
fe0dde |
- Select 15 minutes as new timeout value.
|
|
|
fe0dde |
- Fix CCI and SRG identifiers.
|
|
|
fe0dde |
---
|
|
|
fe0dde |
.../system/accounts/accounts-session/accounts_tmout/rule.yml | 4 ++--
|
|
|
fe0dde |
rhel7/profiles/stig.profile | 2 +-
|
|
|
fe0dde |
2 files changed, 3 insertions(+), 3 deletions(-)
|
|
|
fe0dde |
|
|
|
fe0dde |
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_tmout/rule.yml b/linux_os/guide/system/accounts/accounts-session/accounts_tmout/rule.yml
|
|
|
fe0dde |
index eb64b12e51..ef06735283 100644
|
|
|
fe0dde |
--- a/linux_os/guide/system/accounts/accounts-session/accounts_tmout/rule.yml
|
|
|
fe0dde |
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_tmout/rule.yml
|
|
|
fe0dde |
@@ -26,11 +26,11 @@ identifiers:
|
|
|
fe0dde |
references:
|
|
|
fe0dde |
stigid@ol7: OL07-00-040160
|
|
|
fe0dde |
cui: 3.1.11
|
|
|
fe0dde |
- disa: CCI-000361,CCI-001133
|
|
|
fe0dde |
+ disa: CCI-002361,CCI-001133
|
|
|
fe0dde |
nist: AC-12,SC-10,AC-2(5),CM-6(a)
|
|
|
fe0dde |
nist-csf: PR.AC-7
|
|
|
fe0dde |
ospp: FMT_MOF_EXT.1
|
|
|
fe0dde |
- srg: SRG-OS-000163-GPOS-00072
|
|
|
fe0dde |
+ srg: SRG-OS-000163-GPOS-00072,SRG-OS-000029-GPOS-00010
|
|
|
fe0dde |
vmmsrg: SRG-OS-000163-VMM-000700,SRG-OS-000279-VMM-001010
|
|
|
fe0dde |
stigid@rhel7: RHEL-07-040160
|
|
|
fe0dde |
isa-62443-2013: 'SR 1.1,SR 1.10,SR 1.2,SR 1.5,SR 1.7,SR 1.8,SR 1.9'
|
|
|
fe0dde |
diff --git a/rhel7/profiles/stig.profile b/rhel7/profiles/stig.profile
|
|
|
fe0dde |
index bb4af878a7..93e14eecf6 100644
|
|
|
fe0dde |
--- a/rhel7/profiles/stig.profile
|
|
|
fe0dde |
+++ b/rhel7/profiles/stig.profile
|
|
|
fe0dde |
@@ -47,7 +47,7 @@ selections:
|
|
|
fe0dde |
- var_accounts_user_umask=077
|
|
|
fe0dde |
- var_password_pam_retry=3
|
|
|
fe0dde |
- var_accounts_max_concurrent_login_sessions=10
|
|
|
fe0dde |
- - var_accounts_tmout=10_min
|
|
|
fe0dde |
+ - var_accounts_tmout=15_min
|
|
|
fe0dde |
- var_time_service_set_maxpoll=system_default
|
|
|
fe0dde |
- sysctl_net_ipv4_conf_all_accept_source_route_value=disabled
|
|
|
fe0dde |
- sysctl_net_ipv4_conf_default_accept_source_route_value=disabled
|