akegerreis

DISA customer pointed out potential issue with regex in pwpolicy_custom_regex_enforce

9

### Summary APPL-14-003060 requires a password content policy that matches this regular expression: .*[A-Z]{1,}[a-z]{1,}.* The intent is to match passwords that contain “a minimum of one lowercase character and one...

Add requirement to review exemptions to smart card login.

2

If a site is using smart card login but is also allowing unmapped users, the exemption list should be documented with the ISSM.

Consider adding the newsyslog.d directory to the newsyslog rules

2

### Proposal Consider adding the newsyslog.d directory to the newsyslog rules