Thursday Jul 28, 2011

Known problem: user nobody existence

There's a known problem with the disable-system-accounts finish and audit scripts.  It doesn't seem to recognize the existence of user nobody, and produces faulty messages in both harden and audit modes.

If somebody has a fix, please send it over.  Otherwise I hope to work on this in the next few days. 

Friday Jul 08, 2011

SST:LV 4.2.2 posted

I've just posted version 4.2.2.  You can download it here.

Recently, passwd behavior was changed so that it won't lock NP accounts.  SST has been updated so that it won't either, and so that the subsequent audits won't produce false positives. 

If anybody uses this version successfully, or has used 4.2.1 with good results, please let me know.  I've tested both as well as I can in my VM environment, but SST still needs a good burn-in in a real lab. 

About

Jason Callaway

Search

Categories
  • SST
Archives
« July 2011
SunMonTueWedThuFriSat
     
1
2
3
4
5
6
7
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
29
30
31
      
Today
Feeds