Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update ANSSI R68 #11580

Merged
merged 2 commits into from
Feb 13, 2024
Merged

Update ANSSI R68 #11580

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
b45d494
Add 11 rounds to var_password_pam_unix_rounds
Mab879 Feb 12, 2024
fb8dc97
Update ANSSI R68
Mab879 Feb 12, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 6 additions & 5 deletions controls/anssi.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1283,14 +1283,15 @@ controls:
The selection of rules doesn't cover the use of hardware devices to protect the passwords.
status: supported
rules:
# ENCRYPT_METHOD, system default is SHA512
- var_password_hashing_algorithm=yescrypt
- set_password_hashing_algorithm_systemauth
# The default salt size is secure enough:
# https://bugzilla.redhat.com/show_bug.cgi?id=1229472
# SHA_CRYPT_MIN_ROUNDS 65536
- var_password_pam_unix_rounds=65536
- var_password_pam_unix_rounds=11
- accounts_password_pam_unix_rounds_system_auth
- accounts_password_pam_unix_rounds_password_auth
- accounts_password_pam_minclass
- accounts_password_pam_minlen
- accounts_password_pam_retry
- var_password_pam_minclass=4

- id: R69
title: Securing access to remote user databases
Expand Down
1 change: 1 addition & 0 deletions ...e/system/accounts/accounts-restrictions/password_storage/var_password_pam_unix_rounds.var
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,3 +16,4 @@ options:
default: 5000
5000: 5000
65536: 65536
11: 11
Loading