SCAP Workbench
Posted: 2017/08/04 13:18:11
Hello new to this forum and new to Linux. I'm not sure if this is the right place for my question but figured I would start here.
I'm currently trying to setup a linux vm test lab to play with. I have a CENTOS 7 minimal install server, that I am trying to secure using SCAP workbench on another VM, and after I make the recommended changes SCAP workbench does not recognize them.
Example, I have followed the recommended security guidelines for password policy and edited the following files.
Set Password Retry Prompts Permitted Per-Session
Edited
/etc/pam.d/system-auth to show retry=3
Set Password Strength Minimum Digit Characters
Edited /etc/security/pwquality.conf
Uncommented dcredit = -1
Uncommented minlen = 8 and changed to 10
Uncommented ucredit = -1
Uncommented ocredit = -1
VM has been rebooted, I have verified that the PW Policy are in place by trying to change a password for a user account, but when I rerun SCAP Workbench I get the same results that the test failed.
Other changes I make SCAP Workbench does recognize so the results are inconsistent.
What am I missing?
If this is not the right forum then can some place me in the right direction.
Thank you
I'm currently trying to setup a linux vm test lab to play with. I have a CENTOS 7 minimal install server, that I am trying to secure using SCAP workbench on another VM, and after I make the recommended changes SCAP workbench does not recognize them.
Example, I have followed the recommended security guidelines for password policy and edited the following files.
Set Password Retry Prompts Permitted Per-Session
Edited
/etc/pam.d/system-auth to show retry=3
Set Password Strength Minimum Digit Characters
Edited /etc/security/pwquality.conf
Uncommented dcredit = -1
Uncommented minlen = 8 and changed to 10
Uncommented ucredit = -1
Uncommented ocredit = -1
VM has been rebooted, I have verified that the PW Policy are in place by trying to change a password for a user account, but when I rerun SCAP Workbench I get the same results that the test failed.
Other changes I make SCAP Workbench does recognize so the results are inconsistent.
What am I missing?
If this is not the right forum then can some place me in the right direction.
Thank you