Hi,

if you want to disable certain checks, I suggest looking at creating a tailoring file, scap-workbench can be used for this: https://www.open-scap.org/resources/documentation/customizing-scap-security-guide-for-your-use-case/

regards,
0x2a

On 2017-06-07 18:04, Fen Labalme wrote:
If password access is disabled on a cloud-based server - both from
(virtual) console and via SSH - can the set of password checks be
disabled somehow?

        * 10 checks: Set Password Quality Requirements with pam_pwquality

        *  5 checks: Set Lockouts for Failed Password Attempts

        *  3 checks: Set Password Hashing Algorithm

Thanks,
=Fen
_______________________________________________
scap-security-guide mailing list -- [email protected] To unsubscribe send an email to [email protected]
_______________________________________________
scap-security-guide mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to