Shawn Wells (1): resubmit - Updated Smart Card XCCDF to reflect SSH+CAC docs
RHEL/6/input/system/accounts/physical.xml | 6 +++++- 1 files changed, 5 insertions(+), 1 deletions(-)
- Added link to vendor docs - bolded links - "CAC cards" was redundant
Signed-off-by: Shawn Wells shawn@redhat.com --- RHEL/6/input/system/accounts/physical.xml | 6 +++++- 1 files changed, 5 insertions(+), 1 deletions(-)
diff --git a/RHEL/6/input/system/accounts/physical.xml b/RHEL/6/input/system/accounts/physical.xml index c9d1958..71a7bef 100644 --- a/RHEL/6/input/system/accounts/physical.xml +++ b/RHEL/6/input/system/accounts/physical.xml @@ -401,7 +401,11 @@ is not enabled by default and must be enabled in the system settings. <description> To enable smart card authentication, consult the documentation at: <ul> -<li>https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_...</li> +<li><b>https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_...</b></li> +</ul> +For guidance on enabling SSH to authenticate against a Common Access Card (CAC), consult documentation at: +<ul> +<li><b>https://access.redhat.com/solutions/82273</b></li> </ul> </description> <ocil clause="non-exempt accounts are not using CAC authentication">
ack
On Thu, Aug 7, 2014 at 4:50 PM, Shawn Wells shawn@redhat.com wrote:
- Added link to vendor docs
- bolded links
- "CAC cards" was redundant
Signed-off-by: Shawn Wells shawn@redhat.com
RHEL/6/input/system/accounts/physical.xml | 6 +++++- 1 files changed, 5 insertions(+), 1 deletions(-)
diff --git a/RHEL/6/input/system/accounts/physical.xml b/RHEL/6/input/system/accounts/physical.xml index c9d1958..71a7bef 100644 --- a/RHEL/6/input/system/accounts/physical.xml +++ b/RHEL/6/input/system/accounts/physical.xml @@ -401,7 +401,11 @@ is not enabled by default and must be enabled in the system settings.
<description> To enable smart card authentication, consult the documentation at: <ul> -<li> https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html </li> +<li><b> https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html </b></li> +</ul> +For guidance on enabling SSH to authenticate against a Common Access Card (CAC), consult documentation at: +<ul> +<li><b>https://access.redhat.com/solutions/82273</b></li> </ul> </description> <ocil clause="non-exempt accounts are not using CAC authentication"> -- 1.7.1
-- SCAP Security Guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide https://github.com/OpenSCAP/scap-security-guide/
On 8/7/14, 4:55 PM, David Smith wrote:
ack
On Thu, Aug 7, 2014 at 4:50 PM, Shawn Wells <shawn@redhat.com mailto:shawn@redhat.com> wrote:
- Added link to vendor docs - bolded links - "CAC cards" was redundant Signed-off-by: Shawn Wells <shawn@redhat.com <mailto:shawn@redhat.com>> --- RHEL/6/input/system/accounts/physical.xml | 6 +++++- 1 files changed, 5 insertions(+), 1 deletions(-) diff --git a/RHEL/6/input/system/accounts/physical.xml b/RHEL/6/input/system/accounts/physical.xml index c9d1958..71a7bef 100644 --- a/RHEL/6/input/system/accounts/physical.xml +++ b/RHEL/6/input/system/accounts/physical.xml @@ -401,7 +401,11 @@ is not enabled by default and must be enabled in the system settings. <description> To enable smart card authentication, consult the documentation at: <ul> -<li>https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html</li> +<li><b>https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html</b></li> +</ul> +For guidance on enabling SSH to authenticate against a Common Access Card (CAC), consult documentation at: +<ul> +<li><b>https://access.redhat.com/solutions/82273</b></li> </ul> </description> <ocil clause="non-exempt accounts are not using CAC authentication"> -- 1.7.1 -- SCAP Security Guide mailing list scap-security-guide@lists.fedorahosted.org <mailto:scap-security-guide@lists.fedorahosted.org> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide https://github.com/OpenSCAP/scap-security-guide/
Pushed
$ git push Enter passphrase for key '/home/shawnw/.ssh/id_rsa': Counting objects: 15, done. Delta compression using up to 2 threads. Compressing objects: 100% (8/8), done. Writing objects: 100% (8/8), 851 bytes, done. Total 8 (delta 6), reused 0 (delta 0) To ssh://shawndwells@git.fedorahosted.org/git/scap-security-guide.git c359973..c16a4ff master -> master
scap-security-guide@lists.fedorahosted.org
-
David Smith -
Shawn Wells