STIG link: https://www.stigviewer.com/stig/red_hat_enterprise_linux_6/2015-05-26/finding/V-38645 In oe-core/meta/recipes-extended/shadow/shadow_4.2.1.bb, /etc/login.defs is not defined as CONFFILES of package shadow, as it seems like a conf file. And the permission is not 077 as STIG required.
