This patchset includes a significant body of content editing
to ensure checks/fixes are discrete and comprehensible,
and compatible with the conventions of written English.
It also includes additional transforms to put the content in the
structure seen in a STIG (viz. the Benchmark is a list of Groups,
each of which contains one Rule), as well as a transform to output
this to CSV (which is hopefully only a temporary need).
Some of these transforms depend on the OpenSCAP XCCDF resolve
functionality, for which a bugfix is underway (see OpenSCAP list --
thanks to Peter and Martin).
Jeffrey Blank (8):
updated RPM specfile Requires/BuildRequires, change installation
directory
out unicode, out!!! somebody needs to use a real text editor or stop
copying/pasting * fancy characters are nice, but are causing
trouble for some transforms
more unicode cleanup. hmmm perhaps we need a git commit hook...
added new file that can transform XCCDF Rules into CSV
added Makerules and updated transforms to create STIG-specific
content
updating transform to show STIG-structured XCCDF as a table
temporary fixups to shorthand macros, still need to improve further
comprehensive content (and some copy) editing to XCCDF in system/
directory
RHEL6/Makefile | 12 +++-
.../input/checks/audit_rules_mac_modification.xml | 4 +-
.../audit_rules_networkconfig_modification.xml | 2 +-
.../input/checks/gconf_gnome_disable_automount.xml | 2 +-
.../input/checks/ldap_server_config_olcaccess.xml | 4 +-
.../checks/yum_gpgcheck_global_activation.xml | 2 +-
RHEL6/input/services/avahi.xml | 2 +-
RHEL6/input/services/base.xml | 2 +-
RHEL6/input/services/dhcp.xml | 8 +-
RHEL6/input/services/dns.xml | 6 +-
RHEL6/input/services/ftp.xml | 8 +-
RHEL6/input/services/http.xml | 6 +-
RHEL6/input/services/ldap.xml | 20 ++--
RHEL6/input/services/mail.xml | 14 ++--
RHEL6/input/services/nfs.xml | 4 +-
RHEL6/input/services/snmp.xml | 2 +-
RHEL6/input/services/ssh.xml | 4 +-
RHEL6/input/system/accounts/banners.xml | 34 ++++++--
RHEL6/input/system/accounts/pam.xml | 77 +++++++++++------
RHEL6/input/system/accounts/physical.xml | 20 +++--
.../accounts/restrictions/password_expiration.xml | 11 +--
.../system/accounts/restrictions/root_logins.xml | 89 +++++---------------
RHEL6/input/system/auditing.xml | 28 +++---
RHEL6/input/system/network/iptables.xml | 8 +-
RHEL6/input/system/network/network.xml | 2 +-
RHEL6/input/system/network/ssl.xml | 12 ++--
RHEL6/input/system/network/uncommon.xml | 2 +-
RHEL6/input/system/permissions/files.xml | 18 ++++-
RHEL6/input/system/permissions/mounting.xml | 42 +++++++---
RHEL6/input/system/permissions/permissions.xml | 2 +-
RHEL6/input/system/selinux.xml | 20 ++--
RHEL6/input/system/software/disk_partitioning.xml | 2 +-
RHEL6/input/system/software/integrity.xml | 8 +-
RHEL6/input/system/software/updating.xml | 26 ++++--
RHEL6/transforms/constants.xslt | 1 +
RHEL6/transforms/shorthand2xccdf.xslt | 32 +++++--
RHEL6/transforms/xccdf-addrefs.xslt | 21 +++++
RHEL6/transforms/xccdf2csv-stig.py | 56 ++++++++++++
RHEL6/transforms/xccdf2stigformat.xslt | 73 ++++++++++++----
RHEL6/transforms/xccdf2table-profileccirefs.xslt | 4 +-
RHEL6/transforms/xccdf2table-stig.xslt | 34 +++++---
scap-security-guide.spec | 16 +++-
42 files changed, 469 insertions(+), 271 deletions(-)
create mode 100755 RHEL6/transforms/xccdf2csv-stig.py