Re: [scap-security-guide] #196: False positive: set_sysctl_net_ipv4_conf_default_rp_filter
by fedora-badges
#196: False positive: set_sysctl_net_ipv4_conf_default_rp_filter
------------------------------+-------------------------------------
Reporter: Logan.Rodrian@… | Owner: shawndwells
Type: defect | Status: closed
Priority: major | Milestone: RHEL6 STIG OVAL Content
Component: OVAL content | Version: 0.5.0-InitialDraft
Resolution: worksforme | Keywords:
Blocked By: | Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):
* status: assigned => closed
* cc: scap-security-guide@… (added)
* resolution: => worksforme
Comment:
[root@rhel6 checks]# sysctl -w net.ipv4.conf.default.rp_filter=1
net.ipv4.conf.default.rp_filter = 1
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_conf_default_rp_filter.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_default_rp_filterrvnldf.xml
Definition oval:scap-security-guide.testing:def:307: true
Evaluation done.
[root@rhel6 checks]# sysctl -w net.ipv4.conf.default.rp_filter=0
net.ipv4.conf.default.rp_filter = 0
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_conf_default_rp_filter.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_default_rp_filter_tskpO.xml
Definition oval:scap-security-guide.testing:def:307: false
Evaluation done.
Resolving as worksforme
--
Ticket URL: <https://fedorahosted.org/scap-security-guide/ticket/196#comment:2>
scap-security-guide <http://fedorahosted.org/scap-security-guide>
scap-security-guide
11 years
Re: [scap-security-guide] #195: False positive: set_sysctl_net_ipv4_conf_all_rp_filter
by fedora-badges
#195: False positive: set_sysctl_net_ipv4_conf_all_rp_filter
------------------------------+-------------------------------------
Reporter: Logan.Rodrian@… | Owner: mnewman23
Type: defect | Status: closed
Priority: major | Milestone: RHEL6 STIG OVAL Content
Component: OVAL content | Version: 0.5.0-InitialDraft
Resolution: worksforme | Keywords:
Blocked By: | Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):
* cc: scap-security-guide@… (added)
* resolution: => worksforme
* status: new => closed
Comment:
[root@rhel6 checks]# sysctl -w net.ipv4.conf.all.rp_filter=1
net.ipv4.conf.all.rp_filter = 1
[root@rhel6 checks]# ./testcheck.py sysctl_net_ipv4_conf_all_rp_filter.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_all_rp_filterndWf_I.xml
Definition oval:scap-security-guide.testing:def:303: true
Evaluation done.
[root@rhel6 checks]# sysctl -w net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.all.rp_filter = 0
[root@rhel6 checks]# ./testcheck.py sysctl_net_ipv4_conf_all_rp_filter.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_all_rp_filter_R3sLu.xml
Definition oval:scap-security-guide.testing:def:303: false
Evaluation done.
Resolving as worksforme.
--
Ticket URL: <https://fedorahosted.org/scap-security-guide/ticket/195#comment:1>
scap-security-guide <http://fedorahosted.org/scap-security-guide>
scap-security-guide
11 years
Re: [scap-security-guide] #194: False positive: set_sysctl_net_ipv4_tcp_syncookies
by fedora-badges
#194: False positive: set_sysctl_net_ipv4_tcp_syncookies
------------------------------+-------------------------------------
Reporter: Logan.Rodrian@… | Owner: mnewman23
Type: defect | Status: closed
Priority: major | Milestone: RHEL6 STIG OVAL Content
Component: OVAL content | Version: 0.5.0-InitialDraft
Resolution: worksforme | Keywords:
Blocked By: | Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):
* cc: scap-security-guide@… (added)
* resolution: => worksforme
* status: new => closed
Comment:
[root@rhel6 checks]# sysctl -w net.ipv4.tcp_syncookies=1
net.ipv4.tcp_syncookies = 1
[root@rhel6 checks]# ./testcheck.py sysctl_net_ipv4_tcp_syncookies.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_tcp_syncookiesaOaRpn.xml
Definition oval:scap-security-guide.testing:def:299: true
Evaluation done.
[root@rhel6 checks]# sysctl -w net.ipv4.tcp_syncookies=0
net.ipv4.tcp_syncookies = 0
[root@rhel6 checks]# ./testcheck.py sysctl_net_ipv4_tcp_syncookies.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_tcp_syncookies01QSDP.xml
Definition oval:scap-security-guide.testing:def:299: false
Evaluation done.
Resolving as worksforme.
--
Ticket URL: <https://fedorahosted.org/scap-security-guide/ticket/194#comment:1>
scap-security-guide <http://fedorahosted.org/scap-security-guide>
scap-security-guide
11 years
Re: [scap-security-guide] #193: False positive: set_sysctl_net_ipv4_icmp_ignore_bogus_error_responses
by fedora-badges
#193: False positive: set_sysctl_net_ipv4_icmp_ignore_bogus_error_responses
------------------------------+-------------------------------------
Reporter: Logan.Rodrian@… | Owner: mnewman23
Type: defect | Status: closed
Priority: major | Milestone: RHEL6 STIG OVAL Content
Component: OVAL content | Version: 0.5.0-InitialDraft
Resolution: worksforme | Keywords:
Blocked By: | Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):
* cc: scap-security-guide@… (added)
* resolution: => worksforme
* status: new => closed
Comment:
[root@rhel6 checks]# sysctl -w
net.ipv4.icmp_ignore_bogus_error_responses=1
net.ipv4.icmp_ignore_bogus_error_responses = 1
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_icmp_ignore_bogus_error_responses.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_icmp_ignore_bogus_error_responsesjpYIeF.xml
Definition oval:scap-security-guide.testing:def:295: true
Evaluation done.
[root@rhel6 checks]# sysctl -w
net.ipv4.icmp_ignore_bogus_error_responses=0
net.ipv4.icmp_ignore_bogus_error_responses = 0
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_icmp_ignore_bogus_error_responses.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_icmp_ignore_bogus_error_responsesEaLm0e.xml
Definition oval:scap-security-guide.testing:def:295: false
Evaluation done.
--
Ticket URL: <https://fedorahosted.org/scap-security-guide/ticket/193#comment:1>
scap-security-guide <http://fedorahosted.org/scap-security-guide>
scap-security-guide
11 years
Re: [scap-security-guide] #192: False positive: set_sysctl_net_ipv4_icmp_echo_ignore_broadcasts
by fedora-badges
#192: False positive: set_sysctl_net_ipv4_icmp_echo_ignore_broadcasts
------------------------------+-------------------------------------
Reporter: Logan.Rodrian@… | Owner: mnewman23
Type: defect | Status: closed
Priority: major | Milestone: RHEL6 STIG OVAL Content
Component: OVAL content | Version: 0.5.0-InitialDraft
Resolution: worksforme | Keywords:
Blocked By: | Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):
* cc: scap-security-guide@… (added)
* resolution: => worksforme
* status: new => closed
Comment:
[root@rhel6 checks]# sysctl -w net.ipv4.icmp_echo_ignore_broadcasts=1
net.ipv4.icmp_echo_ignore_broadcasts = 1
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_icmp_echo_ignore_broadcasts.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_icmp_echo_ignore_broadcastslb6csW.xml
Definition oval:scap-security-guide.testing:def:291: true
Evaluation done.
[root@rhel6 checks]# sysctl -w net.ipv4.icmp_echo_ignore_broadcasts=0
net.ipv4.icmp_echo_ignore_broadcasts = 0
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_icmp_echo_ignore_broadcasts.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_icmp_echo_ignore_broadcastsbzRxzR.xml
Definition oval:scap-security-guide.testing:def:291: false
Evaluation done.
Resolving as worksforme.
--
Ticket URL: <https://fedorahosted.org/scap-security-guide/ticket/192#comment:1>
scap-security-guide <http://fedorahosted.org/scap-security-guide>
scap-security-guide
11 years
Re: [scap-security-guide] #191: False positive: set_sysctl_net_ipv4_conf_default_secure_redirects
by fedora-badges
#191: False positive: set_sysctl_net_ipv4_conf_default_secure_redirects
------------------------------+-------------------------------------
Reporter: Logan.Rodrian@… | Owner: mnewman23
Type: defect | Status: closed
Priority: major | Milestone: RHEL6 STIG OVAL Content
Component: OVAL content | Version: 0.5.0-InitialDraft
Resolution: worksforme | Keywords:
Blocked By: | Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):
* status: new => closed
* cc: scap-security-guide@… (added)
* resolution: => worksforme
Comment:
root@rhel6 checks]# sysctl -w net.ipv4.conf.default.secure_redirects=0
net.ipv4.conf.default.secure_redirects = 0
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_conf_default_secure_redirects.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_default_secure_redirectsgLlZJN.xml
Definition oval:scap-security-guide.testing:def:287: true
Evaluation done.
[root@rhel6 checks]# sysctl -w net.ipv4.conf.default.secure_redirects=1
net.ipv4.conf.default.secure_redirects = 1
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_conf_default_secure_redirects.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_default_secure_redirectseZUDRf.xml
Definition oval:scap-security-guide.testing:def:287: false
Evaluation done.
Resolving as worksforme.
--
Ticket URL: <https://fedorahosted.org/scap-security-guide/ticket/191#comment:1>
scap-security-guide <http://fedorahosted.org/scap-security-guide>
scap-security-guide
11 years
Re: [scap-security-guide] #190: False positive: set_sysctl_net_ipv4_conf_default_accept_redirects
by fedora-badges
#190: False positive: set_sysctl_net_ipv4_conf_default_accept_redirects
------------------------------+-------------------------------------
Reporter: Logan.Rodrian@… | Owner: mnewman23
Type: defect | Status: closed
Priority: major | Milestone: RHEL6 STIG OVAL Content
Component: OVAL content | Version: 0.5.0-InitialDraft
Resolution: worksforme | Keywords:
Blocked By: | Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):
* resolution: => worksforme
* cc: scap-security-guide@… (added)
* status: new => closed
Comment:
[root@rhel6 checks]# sysctl -w net.ipv4.conf.default.accept_redirects=0
net.ipv4.conf.default.accept_redirects = 0
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_conf_default_accept_redirects.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_default_accept_redirectsrK5avO.xml
Definition oval:scap-security-guide.testing:def:283: true
Evaluation done.
[root@rhel6 checks]# sysctl -w net.ipv4.conf.default.accept_redirects=1
net.ipv4.conf.default.accept_redirects = 1
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_conf_default_accept_redirects.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_default_accept_redirectsG61oOU.xml
Definition oval:scap-security-guide.testing:def:283: false
Evaluation done.
Resolving as worksforme
--
Ticket URL: <https://fedorahosted.org/scap-security-guide/ticket/190#comment:1>
scap-security-guide <http://fedorahosted.org/scap-security-guide>
scap-security-guide
11 years
Re: [scap-security-guide] #189: False positive: set_sysctl_net_ipv4_conf_default_accept_source_route
by fedora-badges
#189: False positive: set_sysctl_net_ipv4_conf_default_accept_source_route
------------------------------+-------------------------------------
Reporter: Logan.Rodrian@… | Owner: mnewman23
Type: defect | Status: closed
Priority: major | Milestone: RHEL6 STIG OVAL Content
Component: OVAL content | Version: 0.5.0-InitialDraft
Resolution: worksforme | Keywords:
Blocked By: | Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):
* cc: scap-security-guide@… (added)
* resolution: => worksforme
* status: new => closed
Comment:
[root@rhel6 checks]# sysctl -w net.ipv4.conf.all.accept_source_route=0
net.ipv4.conf.all.accept_source_route = 0
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_conf_all_accept_source_route.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_all_accept_source_routeEZFcGD.xml
Definition oval:scap-security-guide.testing:def:267: true
Evaluation done.
[root@rhel6 checks]# sysctl -w net.ipv4.conf.all.accept_source_route=1
net.ipv4.conf.all.accept_source_route = 1
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_conf_all_accept_source_route.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_all_accept_source_routesX48wm.xml
Definition oval:scap-security-guide.testing:def:267: false
Evaluation done.
Resolving as worksforme
--
Ticket URL: <https://fedorahosted.org/scap-security-guide/ticket/189#comment:1>
scap-security-guide <http://fedorahosted.org/scap-security-guide>
scap-security-guide
11 years
Re: [scap-security-guide] #187: False positive: set_sysctl_net_ipv4_conf_all_secure_redirects
by fedora-badges
#187: False positive: set_sysctl_net_ipv4_conf_all_secure_redirects
------------------------------+-------------------------------------
Reporter: Logan.Rodrian@… | Owner: mnewman23
Type: defect | Status: closed
Priority: major | Milestone: RHEL6 STIG OVAL Content
Component: OVAL content | Version: 0.5.0-InitialDraft
Resolution: worksforme | Keywords:
Blocked By: | Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):
* resolution: => worksforme
* status: new => closed
* cc: scap-security-guide@… (added)
Comment:
[root@rhel6 checks]# sysctl -w net.ipv4.conf.all.secure_redirects=0
net.ipv4.conf.all.secure_redirects = 0
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_conf_all_secure_redirects.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_all_secure_redirectsNYVXhR.xml
Definition oval:scap-security-guide.testing:def:275: true
Evaluation done.
[root@rhel6 checks]# sysctl -w net.ipv4.conf.all.secure_redirects=1
net.ipv4.conf.all.secure_redirects = 1
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_conf_all_secure_redirects.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_all_secure_redirectskdj5m5.xml
Definition oval:scap-security-guide.testing:def:275: false
Evaluation done.
Resolving as worksforme
--
Ticket URL: <https://fedorahosted.org/scap-security-guide/ticket/187#comment:1>
scap-security-guide <http://fedorahosted.org/scap-security-guide>
scap-security-guide
11 years