Skip to content

Commit 429447c

Browse files
committed
Fix(OVAL): Correct variable reference in account_disable_inactivity_system_auth
1 parent 8e155ec commit 429447c

1 file changed

Lines changed: 4 additions & 5 deletions

File tree

  • linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_disable_inactivity_system_auth/oval

linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_disable_inactivity_system_auth/oval/shared.xml

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,6 @@
11
<def-group>
2-
<definition class="compliance" id="{{{ rule_id }}}" version="1">
3-
{{{ oval_metadata("The accounts should be configured to expire automatically following"
4-
~ " password expiration.", rule_title=rule_title) }}}
2+
<definition class="compliance" id="{{{ rule_id }}}" version="2">
3+
{{{ oval_metadata("The accounts should be configured to be disabled automatically after a period of inactivity.", rule_title=rule_title) }}}
54
<criteria
65
comment="the value for the inactive parameter should be set appropriately in /etc/pam.d/system-auth">
76
<criterion test_ref="test_system_auth_inactive" />
@@ -22,14 +21,14 @@
2221
</ind:textfilecontent54_object>
2322

2423
<ind:textfilecontent54_state id="state_system_auth_inactive" version="1">
25-
<ind:subexpression operation="less than or equal" var_ref="var_account_disable_post_pw_expiration"
24+
<ind:subexpression operation="less than or equal" var_ref="var_account_disable_inactivity"
2625
datatype="int" />
2726
</ind:textfilecontent54_state>
2827

2928
<ind:textfilecontent54_state id="state_system_auth_inactive_positive" version="1">
3029
<ind:subexpression operation="greater than" datatype="int">0</ind:subexpression>
3130
</ind:textfilecontent54_state>
3231

33-
<external_variable comment="inactive days expiration" datatype="int" id="var_account_disable_post_pw_expiration" version="1" />
32+
<external_variable comment="days of inactivity before account is locked" datatype="int" id="var_account_disable_inactivity" version="1" />
3433

3534
</def-group>

0 commit comments

Comments
 (0)