File tree Expand file tree Collapse file tree
linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_disable_inactivity_system_auth/oval Expand file tree Collapse file tree Original file line number Diff line number Diff line change 11<def-group >
2- <definition class =" compliance" id =" {{{ rule_id }}}" version =" 1" >
3- {{{ oval_metadata("The accounts should be configured to expire automatically following"
4- ~ " password expiration.", rule_title=rule_title) }}}
2+ <definition class =" compliance" id =" {{{ rule_id }}}" version =" 2" >
3+ {{{ oval_metadata("The accounts should be configured to be disabled automatically after a period of inactivity.", rule_title=rule_title) }}}
54 <criteria
65 comment =" the value for the inactive parameter should be set appropriately in /etc/pam.d/system-auth" >
76 <criterion test_ref =" test_system_auth_inactive" />
2221 </ind : textfilecontent54_object >
2322
2423 <ind : textfilecontent54_state id =" state_system_auth_inactive" version =" 1" >
25- <ind : subexpression operation =" less than or equal" var_ref =" var_account_disable_post_pw_expiration "
24+ <ind : subexpression operation =" less than or equal" var_ref =" var_account_disable_inactivity "
2625 datatype =" int" />
2726 </ind : textfilecontent54_state >
2827
2928 <ind : textfilecontent54_state id =" state_system_auth_inactive_positive" version =" 1" >
3029 <ind : subexpression operation =" greater than" datatype =" int" >0</ind : subexpression >
3130 </ind : textfilecontent54_state >
3231
33- <external_variable comment =" inactive days expiration " datatype =" int" id =" var_account_disable_post_pw_expiration " version =" 1" />
32+ <external_variable comment =" days of inactivity before account is locked " datatype =" int" id =" var_account_disable_inactivity " version =" 1" />
3433
3534</def-group >
You can’t perform that action at this time.
0 commit comments