Renaming RHEL CCE file

Renaming RHEL CCE file to reflect CCEs are for all of RHEL

process:
[shawnw@ssgdev-rhel7 references]$ git mv cce-rhel6-avail.txt cce-rhel-avail.txt
[shawnw@ssgdev-rhel7 references]$ cd ../../
[shawnw@ssgdev-rhel7 scap-security-guide]$ grep -rin cce-rhel6-avail.txt *
RHEL/6/utils/verify-cce.py:29:with open('../references/cce-rhel6-avail.txt', 'r') as txt_file:
[shawnw@ssgdev-rhel7 scap-security-guide]$ sed -i 's/cce-rhel6-avail.txt/cce-rhel-avail.txt/g' RHEL/6/utils/verify-cce.py
Added CCEs for rules in RHEL7 CCP profile

Note that I did skip the IPTables rules, as these will be going away.
Merge branch 'accounts_password_pam_cracklib_retry' of https://github.com/shawndwells/scap-security-guide into shawndwells-accounts_password_pam_cracklib_retry

Merging for PR #246

https://github.com/OpenSCAP/scap-security-guide/pull/246#issuecomment-57023999
Merge branch 'shawndwells-accounts_password_pam_cracklib_retry'

Merge for PR 246

https://github.com/OpenSCAP/scap-security-guide/pull/246#issuecomment-57023999
Merge remote-tracking branch 'upstream/master'
updates to accounts_password_pam_dcredit

- Updates XCCDF/OVAL to accounts_password_pam_dcredit from accounts_password_pam_cracklib_dcredit
- Updated OVAL naming schemes (e.g. variable name)
- Updated OVAL to reflect RHEL7
- Updated XCCDF to reflect pam_pwquality not pam_cracklib
renamed accounts_password_pam_cracklib_ucredit to accounts_password_pam_ucredit

[shawnw@ssgdev-rhel7 scap-security-guide]$ grep -rin accounts_password_pam_cracklib_ucredit *
RHEL/6/input/auxiliary/stig_overlay.xml:183:	<overlay owner="disastig" ruleid="accounts_password_pam_cracklib_ucredit" ownerid="RHEL-06-000057" disa="192" severity="low">
RHEL/6/input/profiles/CS2.xml:12:<select idref="accounts_password_pam_cracklib_ucredit" selected="true"/>
RHEL/6/input/profiles/CSCF-RHEL6-MLS.xml:169:<select idref="accounts_password_pam_cracklib_ucredit" selected="true" />
RHEL/6/input/profiles/common.xml:56:<select idref="accounts_password_pam_cracklib_ucredit" selected="true"/>
RHEL/6/input/profiles/fisma-medium-rhel6-server.xml:280:<select idref="accounts_password_pam_cracklib_ucredit" selected="true" />
RHEL/6/input/profiles/rht-ccp.xml:59:<select idref="accounts_password_pam_cracklib_ucredit" selected="true"/>
RHEL/6/input/profiles/usgcb-rhel6-server.xml:78:<select idref="accounts_password_pam_cracklib_ucredit" selected="true" />
RHEL/6/input/system/accounts/pam.xml:314:<Rule id="accounts_password_pam_cracklib_ucredit">
RHEL/6/input/system/accounts/pam.xml:334:<oval id="accounts_password_pam_cracklib_ucredit" value="var_password_pam_cracklib_ucredit"/>
RHEL/7/input/profiles/rht-ccp.xml:56:<select idref="accounts_password_pam_cracklib_ucredit" selected="true"/>
RHEL/7/input/system/accounts/pam.xml:313:<Rule id="accounts_password_pam_cracklib_ucredit">
RHEL/7/input/system/accounts/pam.xml:333:<oval id="accounts_password_pam_cracklib_ucredit" value="var_password_pam_cracklib_ucredit"/>
shared/oval/accounts_password_pam_cracklib_ucredit.xml:2:  <definition class="compliance" id="accounts_password_pam_cracklib_ucredit" version="1">
[shawnw@ssgdev-rhel7 scap-security-guide]$ sed -i 's/accounts_password_pam_cracklib_ucredit/accounts_password_pam_ucredit/g' RHEL/6/input/auxiliary/stig_overlay.xml RHEL/6/input/profiles/* RHEL/6/input/system/accounts/pam.xmlRHEL/7/input/profiles/rht-ccp.xml RHEL/7/input/system/accounts/pam.xml shared/oval/accounts_password_pam_cracklib_ucredit.xml
sed: can't read RHEL/6/input/system/accounts/pam.xmlRHEL/7/input/profiles/rht-ccp.xml: No such file or directory
[shawnw@ssgdev-rhel7 scap-security-guide]$ sed -i 's/accounts_password_pam_cracklib_ucredit/accounts_password_pam_ucredit/g' RHEL/6/input/auxiliary/stig_overlay.xml RHEL/6/input/profiles/* RHEL/6/input/system/accounts/pam.xml RHEL/7/input/profiles/rht-ccp.xml RHEL/7/input/system/accounts/pam.xml shared/oval/accounts_password_pam_cracklib_ucredit.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ vim shared/oval/accounts_password_pam_cracklib_ucredit.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ grep -rin var_password_pam_cracklib_ucredit *
OpenStack/input/profiles/stig-rhevm3.xml:247:<refine-value idref="var_password_pam_cracklib_ucredit" selector="2"/>
RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_ucredit.sh:2:populate var_password_pam_cracklib_ucredit
RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_ucredit.sh:5:	sed -i --follow-symlink "s/\(ucredit *= *\).*/\1$var_password_pam_cracklib_ucredit/" /etc/pam.d/system-auth
RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_ucredit.sh:7:	sed -i --follow-symlink "/pam_cracklib.so/ s/$/ ucredit=$var_password_pam_cracklib_ucredit/" /etc/pam.d/system-auth
RHEL/6/input/profiles/stig-rhel6-server-upstream.xml:111:<refine-value idref="var_password_pam_cracklib_ucredit" selector="1" />
RHEL/6/input/profiles/common.xml:246:<refine-value idref="var_password_pam_cracklib_ucredit" selector="2"/>
RHEL/6/input/profiles/rht-ccp.xml:17:<refine-value idref="var_password_pam_cracklib_ucredit" selector="2"/>
RHEL/6/input/profiles/usgcb-rhel6-server.xml:77:<refine-value idref="var_password_pam_cracklib_ucredit" selector="1" />
RHEL/6/input/system/accounts/pam.xml:178:<Value id="var_password_pam_cracklib_ucredit" type="number" operator="equals" interactive="0">
RHEL/6/input/system/accounts/pam.xml:334:<oval id="accounts_password_pam_ucredit" value="var_password_pam_cracklib_ucredit"/>
RHEL/7/input/profiles/rht-ccp.xml:17:<refine-value idref="var_password_pam_cracklib_ucredit" selector="2"/>
RHEL/7/input/system/accounts/pam.xml:178:<Value id="var_password_pam_cracklib_ucredit" type="number" operator="equals" interactive="0">
RHEL/7/input/system/accounts/pam.xml:333:<oval id="accounts_password_pam_ucredit" value="var_password_pam_cracklib_ucredit"/>
RHEVM3/input/profiles/stig-rhevm3.xml:247:<refine-value idref="var_password_pam_cracklib_ucredit" selector="2"/>
shared/oval/accounts_password_pam_cracklib_ucredit.xml:30:    var_ref="var_password_pam_cracklib_ucredit" />
shared/oval/accounts_password_pam_cracklib_ucredit.xml:34:  datatype="int" id="var_password_pam_cracklib_ucredit"
[shawnw@ssgdev-rhel7 scap-security-guide]$ sed -i 's/var_password_pam_cracklib_ucredit/var_password_pam_ucredit/g' OpenStack/input/profiles/stig-rhevm3.xml RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_ucredit.sh RHEL/6/input/profiles/* RHEL/6/input/system/accounts/pam.xml RHEL/7/input/profiles/rht-ccp.xml RHEL/7/input/system/accounts/pam.xml RHEVM3/input/profiles/stig-rhevm3.xml shared/oval/accounts_password_pam_cracklib_ucredit.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ git commit -a
Aborting commit due to empty commit message.
[shawnw@ssgdev-rhel7 scap-security-guide]$ git mv shared/oval/accounts_password_pam_cracklib_ucredit.xml shared/oval/accounts_password_pam_ucredit.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ git mv RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_ucredit.sh RHEL/6/input/fixes/bash/accounts_password_pam_ucredit.sh
[shawnw@ssgdev-rhel7 scap-security-guide]$ cd RHEL/6/input/checks/
[shawnw@ssgdev-rhel7 checks]$ rm accounts_password_pam_cracklib_ucredit.xml
[shawnw@ssgdev-rhel7 checks]$ ln -s ../../../../shared/oval/accounts_password_pam_ucredit.xml .
[shawnw@ssgdev-rhel7 checks]$ cd ../../../7/input/checks/
[shawnw@ssgdev-rhel7 checks]$ ln -s ../../../../shared/oval/accounts_password_pam_ucredit.xml .
[shawnw@ssgdev-rhel7 checks]$ git commit -a
Aborting commit due to empty commit message.
[shawnw@ssgdev-rhel7 checks]$ git add ../../../6/input/checks/accounts_password_pam_ucredit.xml
[shawnw@ssgdev-rhel7 checks]$ git add accounts_password_pam_ucredit.xml
updated password_pam_ucredit OVAL for rhel7

testing
[shawnw@ssgdev-rhel7 oval]$ ./testcheck.py accounts_password_pam_ucredit.xml
external_variable with id : var_password_pam_ucredit
external_variable specified, but no value provided via environment variable
[shawnw@ssgdev-rhel7 oval]$ export var_password_pam_ucredit=-1
[shawnw@ssgdev-rhel7 oval]$ ./testcheck.py accounts_password_pam_ucredit.xml
external_variable with id : var_password_pam_ucredit
Evaluating with OVAL tempfile : /tmp/accounts_password_pam_ucredit2ZhlwH.xml
Writing results to : /tmp/accounts_password_pam_ucredit2ZhlwH.xml-results
Definition oval:scap-security-guide.testing:def:103: true
Definition oval:scap-security-guide.testing:def:101: false
Definition oval:scap-security-guide.testing:def:100: false
Evaluation done.
[shawnw@ssgdev-rhel7 oval]$ sudo vim /etc/pam.d/system-auth
[sudo] password for shawnw:
[shawnw@ssgdev-rhel7 oval]$ grep ucredit /etc/pam.d/system-auth
password    requisite     pam_pwquality.so try_first_pass local_users_only dcredit=-1 retry=3 authtok_type= ucredit=-1
[shawnw@ssgdev-rhel7 oval]$ ./testcheck.py accounts_password_pam_ucredit.xml
external_variable with id : var_password_pam_ucredit
Evaluating with OVAL tempfile : /tmp/accounts_password_pam_ucreditxH7iMW.xml
Writing results to : /tmp/accounts_password_pam_ucreditxH7iMW.xml-results
Definition oval:scap-security-guide.testing:def:103: true
Definition oval:scap-security-guide.testing:def:101: false
Definition oval:scap-security-guide.testing:def:100: true
Evaluation done.
[shawnw@ssgdev-rhel7 oval]$ export var_password_pam_ucredit=-3
[shawnw@ssgdev-rhel7 oval]$ ./testcheck.py accounts_password_pam_ucredit.xml
external_variable with id : var_password_pam_ucredit
Evaluating with OVAL tempfile : /tmp/accounts_password_pam_ucreditiyF0tc.xml
Writing results to : /tmp/accounts_password_pam_ucreditiyF0tc.xml-results
Definition oval:scap-security-guide.testing:def:103: true
Definition oval:scap-security-guide.testing:def:101: false
Definition oval:scap-security-guide.testing:def:100: false
Evaluation done.
[shawnw@ssgdev-rhel7 oval]$ export var_password_pam_ucredit=4
[shawnw@ssgdev-rhel7 oval]$ ./testcheck.py accounts_password_pam_ucredit.xml
external_variable with id : var_password_pam_ucredit
Evaluating with OVAL tempfile : /tmp/accounts_password_pam_ucreditFiGXzc.xml
Writing results to : /tmp/accounts_password_pam_ucreditFiGXzc.xml-results
Definition oval:scap-security-guide.testing:def:103: true
Definition oval:scap-security-guide.testing:def:101: false
Definition oval:scap-security-guide.testing:def:100: true
Evaluation done.
updated RHEL7 XCCDF of accounts_password_pam_ucredit

to reflect pam_pwquality
updated naming accounts_password_pam_cracklib_ocredit.xml -> shared/oval/accounts_password_pam_ocredit.xml
updated XCCDF to reflect pam_cracklib -> pam_pwquality
updated accounts_password_pam_ocredit OVAL for RHEL7
updated accounts_password_pam_cracklib_lcredit to password_pam_lcredit

[shawnw@ssgdev-rhel7 scap-security-guide]$ grep -rin accounts_password_pam_cracklib_lcredit *
RHEL/6/input/auxiliary/stig_overlay.xml:191:	<overlay owner="disastig" ruleid="accounts_password_pam_cracklib_lcredit" ownerid="RHEL-06-000059" disa="193" severity="low">
RHEL/6/input/profiles/CS2.xml:14:<select idref="accounts_password_pam_cracklib_lcredit" selected="true"/>
RHEL/6/input/profiles/CSCF-RHEL6-MLS.xml:167:<select idref="accounts_password_pam_cracklib_lcredit" selected="true" />
RHEL/6/input/profiles/common.xml:58:<select idref="accounts_password_pam_cracklib_lcredit" selected="true"/>
RHEL/6/input/profiles/fisma-medium-rhel6-server.xml:282:<select idref="accounts_password_pam_cracklib_lcredit" selected="true" />
RHEL/6/input/profiles/rht-ccp.xml:61:<select idref="accounts_password_pam_cracklib_lcredit" selected="true"/>
RHEL/6/input/profiles/usgcb-rhel6-server.xml:80:<select idref="accounts_password_pam_cracklib_lcredit" selected="true" />
RHEL/6/input/system/accounts/pam.xml:364:<Rule id="accounts_password_pam_cracklib_lcredit">
RHEL/6/input/system/accounts/pam.xml:384:<oval id="accounts_password_pam_cracklib_lcredit" value="var_password_pam_cracklib_lcredit"/>
RHEL/7/input/profiles/rht-ccp.xml:58:<select idref="accounts_password_pam_cracklib_lcredit" selected="true"/>
RHEL/7/input/system/accounts/pam.xml:363:<Rule id="accounts_password_pam_cracklib_lcredit">
RHEL/7/input/system/accounts/pam.xml:383:<oval id="accounts_password_pam_cracklib_lcredit" value="var_password_pam_cracklib_lcredit"/>
shared/oval/accounts_password_pam_cracklib_lcredit.xml:2:  <definition class="compliance" id="accounts_password_pam_cracklib_lcredit" version="1">
[shawnw@ssgdev-rhel7 scap-security-guide]$ sed -i 's/accounts_password_pam_cracklib_lcredit/accounts_password_pam_lcredit/g' RHEL/6/input/auxiliary/stig_overlay.xml RHEL/6/input/profiles/* RHEL/6/input/system/accounts/pam.xml RHEL/7/input/profiles/rht-ccp.xml RHEL/7/input/system/accounts/pam.xml shared/oval/accounts_password_pam_cracklib_lcredit.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ git mv shared/oval/accounts_password_pam_cracklib_lcredit.xml shared/oval/accounts_password_pam_lcredit.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ cd RHEL/6/input/checks/
[shawnw@ssgdev-rhel7 checks]$ git rm accounts_password_pam_cracklib_lcredit.xml
rm 'RHEL/6/input/checks/accounts_password_pam_cracklib_lcredit.xml'
[shawnw@ssgdev-rhel7 checks]$ ln -s ../../../../shared/oval/accounts_password_pam_lcredit.xml .
[shawnw@ssgdev-rhel7 checks]$ cd ../../../7/input/checks/
[shawnw@ssgdev-rhel7 checks]$ ln -s ../../../../shared/oval/accounts_password_pam_lcredit.xml .
[shawnw@ssgdev-rhel7 checks]$ vim accounts_password_pam_lcredit.xml
[shawnw@ssgdev-rhel7 checks]$ cd ../../../../
[shawnw@ssgdev-rhel7 scap-security-guide]$ grep -rin var_password_pam_cracklib_lcredit *

[shawnw@ssgdev-rhel7 scap-security-guide]$ grep -rin var_password_pam_cracklib_lcredit *
OpenStack/input/profiles/stig-rhevm3.xml:251:<refine-value idref="var_password_pam_cracklib_lcredit" selector="2"/>
RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_lcredit.sh:2:populate var_password_pam_cracklib_lcredit
RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_lcredit.sh:5:	sed -i --follow-symlink "s/\(lcredit *= *\).*/\1$var_password_pam_cracklib_lcredit/" /etc/pam.d/system-auth
RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_lcredit.sh:7:	sed -i --follow-symlink "/pam_cracklib.so/ s/$/ lcredit=$var_password_pam_cracklib_lcredit/" /etc/pam.d/system-auth
RHEL/6/input/profiles/common.xml:250:<refine-value idref="var_password_pam_cracklib_lcredit" selector="2"/>
RHEL/6/input/profiles/rht-ccp.xml:19:<refine-value idref="var_password_pam_cracklib_lcredit" selector="2"/>
RHEL/6/input/profiles/stig-rhel6-server-upstream.xml:113:<refine-value idref="var_password_pam_cracklib_lcredit" selector="1"/>
RHEL/6/input/profiles/usgcb-rhel6-server.xml:79:<refine-value idref="var_password_pam_cracklib_lcredit" selector="1" />
RHEL/6/input/system/accounts/pam.xml:169:<Value id="var_password_pam_cracklib_lcredit" type="number" operator="equals" interactive="0">
RHEL/6/input/system/accounts/pam.xml:384:<oval id="accounts_password_pam_lcredit" value="var_password_pam_cracklib_lcredit"/>
RHEL/7/input/profiles/rht-ccp.xml:19:<refine-value idref="var_password_pam_cracklib_lcredit" selector="2"/>
RHEL/7/input/system/accounts/pam.xml:169:<Value id="var_password_pam_cracklib_lcredit" type="number" operator="equals" interactive="0">
RHEL/7/input/system/accounts/pam.xml:383:<oval id="accounts_password_pam_lcredit" value="var_password_pam_cracklib_lcredit"/>
RHEVM3/input/profiles/stig-rhevm3.xml:251:<refine-value idref="var_password_pam_cracklib_lcredit" selector="2"/>
shared/oval/accounts_password_pam_lcredit.xml:30:    var_ref="var_password_pam_cracklib_lcredit" />
shared/oval/accounts_password_pam_lcredit.xml:34:  datatype="int" id="var_password_pam_cracklib_lcredit"
[shawnw@ssgdev-rhel7 scap-security-guide]$ sed -i 's/var_password_pam_cracklib_lcredit/var_password_pam_lcredit/g' OpenStack/input/profiles/stig-rhevm3.xml RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_lcredit.sh RHEL/6/input/profiles/* RHEL/6/input/system/accounts/pam.xml RHEL/7/input/profiles/rht-ccp.xml RHEL/7/input/system/accounts/pam.xml RHEVM3/input/profiles/stig-rhevm3.xml shared/oval/accounts_password_pam_lcredit.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ git mv RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_lcredit.sh RHEL/6/input/fixes/bash/accounts_password_pam_lcredit.sh
updated xccdf of password_pam_lcredit to reflect cracklib->pwquality
updated OVAL for accounts_password_pam_lcredit to include RHEL7
Updating naming accounts_password_pam_cracklib_difok -> accounts_password_pam_difok.xml

process:
[shawnw@ssgdev-rhel7 scap-security-guide]$ grep -rin accounts_password_pam_cracklib_difok *
RHEL/6/input/auxiliary/stig_overlay.xml:195:	<overlay owner="disastig" ruleid="accounts_password_pam_cracklib_difok" ownerid="RHEL-06-000060" disa="195" severity="low">
RHEL/6/input/profiles/CS2.xml:15:<select idref="accounts_password_pam_cracklib_difok" selected="true"/>
RHEL/6/input/profiles/CSCF-RHEL6-MLS.xml:165:<select idref="accounts_password_pam_cracklib_difok" selected="true" />
RHEL/6/input/profiles/common.xml:59:<select idref="accounts_password_pam_cracklib_difok" selected="true"/>
RHEL/6/input/profiles/fisma-medium-rhel6-server.xml:283:<select idref="accounts_password_pam_cracklib_difok" selected="true" />
RHEL/6/input/profiles/fisma-medium-rhel6-server.xml:299:<select idref="accounts_password_pam_cracklib_difok" selected="true" />
RHEL/6/input/profiles/rht-ccp.xml:62:<select idref="accounts_password_pam_cracklib_difok" selected="true"/>
RHEL/6/input/profiles/usgcb-rhel6-server.xml:84:<select idref="accounts_password_pam_cracklib_difok" selected="true" />
RHEL/6/input/system/accounts/pam.xml:389:<Rule id="accounts_password_pam_cracklib_difok">
RHEL/6/input/system/accounts/pam.xml:409:<oval id="accounts_password_pam_cracklib_difok" value="var_password_pam_cracklib_difok"/>
RHEL/7/input/auxiliary/stig_overlay.xml:187:	<overlay owner="disastig" ruleid="accounts_password_pam_cracklib_difok" ownerid="RHEL-06-000060" disa="195" severity="low">
RHEL/7/input/profiles/rht-ccp.xml:59:<select idref="accounts_password_pam_cracklib_difok" selected="true"/>
RHEL/7/input/system/accounts/pam.xml:388:<Rule id="accounts_password_pam_cracklib_difok">
RHEL/7/input/system/accounts/pam.xml:409:<oval id="accounts_password_pam_cracklib_difok" value="var_password_pam_cracklib_difok"/>
shared/oval/accounts_password_pam_cracklib_difok.xml:2: <definition class="compliance" id="accounts_password_pam_cracklib_difok" version="1">
shared/oval/accounts_password_pam_cracklib_difok.xml:14:      test_ref="test_accounts_password_pam_cracklib_difok" />
shared/oval/accounts_password_pam_cracklib_difok.xml:18:  <ind:textfilecontent54_test check="all" comment="check the configuration of /etc/pam.d/system-auth" id="test_accounts_password_pam_cracklib_difok" version="1">
shared/oval/accounts_password_pam_cracklib_difok.xml:19:    <ind:object object_ref="object_accounts_password_pam_cracklib_difok" />
shared/oval/accounts_password_pam_cracklib_difok.xml:20:    <ind:state state_ref="state_accounts_password_pam_cracklib_difok" />
shared/oval/accounts_password_pam_cracklib_difok.xml:26:  <ind:textfilecontent54_object id="object_accounts_password_pam_cracklib_difok" version="1">
shared/oval/accounts_password_pam_cracklib_difok.xml:33:  <ind:textfilecontent54_state id="state_accounts_password_pam_cracklib_difok" version="1">
[shawnw@ssgdev-rhel7 scap-security-guide]$ sed -i 's/accounts_password_pam_cracklib_difok/accounts_password_pam_difok/g' RHEL/6/input/auxiliary/stig_overlay.xml RHEL/6/input/profiles/* RHEL/6/input/system/accounts/pam.xml RHEL/7/input/auxiliary/stig_overlay.xml RHEL/7/input/profiles/rht-ccp.xml RHEL/7/input/system/accounts/pam.xml shared/oval/accounts_password_pam_cracklib_difok.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ vim shared/oval/accounts_password_pam_cracklib_difok.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ git mv shared/oval/accounts_password_pam_cracklib_difok.xml shared/oval/accounts_password_pam_difok.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ vim shared/oval/accounts_password_pam_cracklib_difok.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ vim shared/oval/accounts_password_pam_difok.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ grep -rin var_password_pam_cracklib_difok *
OpenStack/input/profiles/stig-rhevm3.xml:253:<refine-value idref="var_password_pam_cracklib_difok" selector="3"/>
RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_difok.sh:2:populate var_password_pam_cracklib_difok
RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_difok.sh:5:	sed -i --follow-symlink "s/\(difok *= *\).*/\1$var_password_pam_cracklib_difok/" /etc/pam.d/system-auth
RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_difok.sh:7:	sed -i --follow-symlink "/pam_cracklib.so/ s/$/ difok=$var_password_pam_cracklib_difok/" /etc/pam.d/system-auth
RHEL/6/input/profiles/common.xml:252:<refine-value idref="var_password_pam_cracklib_difok" selector="3"/>
RHEL/6/input/profiles/fisma-medium-rhel6-server.xml:298:<refine-value idref="var_password_pam_cracklib_difok" selector="1" />
RHEL/6/input/profiles/rht-ccp.xml:20:<refine-value idref="var_password_pam_cracklib_difok" selector="3"/>
RHEL/6/input/profiles/usgcb-rhel6-server.xml:83:<refine-value idref="var_password_pam_cracklib_difok" selector="3" />
RHEL/6/input/system/accounts/pam.xml:187:<Value id="var_password_pam_cracklib_difok" type="number" operator="equals" interactive="0">
RHEL/6/input/system/accounts/pam.xml:393:Add <tt>difok=<i><sub idref="var_password_pam_cracklib_difok" /></i></tt> after pam_cracklib.so to require differing
RHEL/6/input/system/accounts/pam.xml:409:<oval id="accounts_password_pam_difok" value="var_password_pam_cracklib_difok"/>
RHEL/7/input/profiles/rht-ccp.xml:20:<refine-value idref="var_password_pam_cracklib_difok" selector="3"/>
RHEL/7/input/system/accounts/pam.xml:187:<Value id="var_password_pam_cracklib_difok" type="number" operator="equals" interactive="0">
RHEL/7/input/system/accounts/pam.xml:409:<oval id="accounts_password_pam_difok" value="var_password_pam_cracklib_difok"/>
RHEVM3/input/profiles/stig-rhevm3.xml:253:<refine-value idref="var_password_pam_cracklib_difok" selector="3"/>
shared/oval/accounts_password_pam_difok.xml:24:  datatype="int" id="var_password_pam_cracklib_difok" version="1" />
shared/oval/accounts_password_pam_difok.xml:35:    <ind:subexpression datatype="int" operation="greater than or equal" var_ref="var_password_pam_cracklib_difok" />
[shawnw@ssgdev-rhel7 scap-security-guide]$ sed -i 's/var_password_pam_cracklib_difok/var_password_pam_difok/g' OpenStack/input/profiles/stig-rhevm3.xml RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_difok.sh RHEL/6/input/profiles/* RHEL/6/input/system/accounts/pam.xml RHEL/7/input/profiles/rht-ccp.xml RHEL/7/input/system/accounts/pam.xml RHEVM3/input/profiles/stig-rhevm3.xml shared/oval/accounts_password_pam_difok.xml
[shawnw@ssgdev-rhel7 scap-security-guide]$ git mv RHEL/6/input/fixes/bash/accounts_password_pam_cracklib_difok.sh RHEL/6/input/fixes/bash/accounts_password_pam_difok.sh
[shawnw@ssgdev-rhel7 scap-security-guide]$ git commit -a
Aborting commit due to empty commit message.
[shawnw@ssgdev-rhel7 scap-security-guide]$ cd RHEL/6/input/checks/
[shawnw@ssgdev-rhel7 checks]$ git rm accounts_password_pam_cracklib_difok.xml
rm 'RHEL/6/input/checks/accounts_password_pam_cracklib_difok.xml'
[shawnw@ssgdev-rhel7 checks]$ ln -s ../../../../shared/oval/accounts_password_pam_difok.xml .
[shawnw@ssgdev-rhel7 checks]$ cd ../../../7/input/checks/
[shawnw@ssgdev-rhel7 checks]$ ln -s ../../../../shared/oval/accounts_password_pam_difok.xml .
[shawnw@ssgdev-rhel7 checks]$ git add accounts_password_pam_difok.xml
[shawnw@ssgdev-rhel7 checks]$ git add ../../../6/input/checks/accounts_password_pam_difok.xml
[shawnw@ssgdev-rhel7 checks]$ git commit -a
updating XCCDF pam_cracklib->pam_pwquality for accounts_password_pam_difok
updated accounts_password_pam_difok OVAL for RHEL7

note per manpage the difok value must be non-negative, so took out "-?" from regex
adding remediation for file_owner_etc_group.sh
bash remediations for file_owner_etc_group