[PATCH 0/2] CCE sanity checking
by David Smith
Added a script to the utils directory which 1) lists granted CCEs, 2) checks assigned CCEs against the list of granted CCEs for validity, 3) lists available CCEs, and 4) checks for any duplicate entries.
David Smith (2):
added script to verify validity of CCE assignments
added blank line at the top to avoid a false positive with
verify-cce.py
RHEL6/references/cce-rhel6-avail.txt | 1 +
RHEL6/utils/verify-cce.py | 47 ++++++++++++++++++++++++++++++++++
2 files changed, 48 insertions(+), 0 deletions(-)
create mode 100755 RHEL6/utils/verify-cce.py
10 years, 11 months
[PATCH] added and modified CCEs
by David Smith
Found a couple of CCE entries that were invalid (didn't match any that had been allocated).
David Smith (1):
CCE fixes
RHEL6/input/services/ftp.xml | 3 ---
RHEL6/input/system/accounts/pam.xml | 8 ++++----
2 files changed, 4 insertions(+), 7 deletions(-)
10 years, 11 months
[PATCH] added NIST 800-53 rev3 in XML format to references folder
by Jeffrey Blank
This is the first part of the patch which adds NIST 800-53
to the references folder.
This will enable us to programmatically display fragments of 800-53 alongside
our guidance content (e.g. policy tables), and also with DISA FSO's CCIs, which
are rewritten/separated fragments from 800-53, to provide context and
comprehensibility.
---
RHEL6/references/nist-800-53-rev3.xml | 8270 +++++++++++++++++++++++++++++++++
1 files changed, 8270 insertions(+), 0 deletions(-)
create mode 100644 RHEL6/references/nist-800-53-rev3.xml
diff --git a/RHEL6/references/nist-800-53-rev3.xml b/RHEL6/references/nist-800-53-rev3.xml
new file mode 100644
index 0000000..db4a868
--- /dev/null
+++ b/RHEL6/references/nist-800-53-rev3.xml
@@ -0,0 +1,8270 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<ns3:controls xmlns="http://scap.nist.gov/schema/sp800-53/1.0" xmlns:ns2="http://www.w3.org/1999/xhtml" xmlns:ns3="http://scap.nist.gov/schema/sp800-53/feed/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" pub_date="2012-09-17T10:54:22.360-04:00" xsi:schemaLocation="http://scap.nist.gov/schema/sp800-53/1.0 http://nvd.nist.gov/schema/sp800-53/feed/1.0/sp800-53-feed_1.0.xsd">
+ <ns3:control>
+ <control-class>Technical</control-class>
+ <family>Access Control</family>
+ <number>AC-1</number>
+ <title>Access Control Policy and Procedures</title>
+ <priority>P1</priority>
+ <description>
+ <ns2:div>
+ <ns2:p class="align_left">The organization develops, disseminates, and reviews/updates [<ns2:em>Assignment: organization-defined frequency</ns2:em>]:</ns2:p>
+ <ns2:p class="align_left"/>
+ </ns2:div>
+ </description>
+ <supplemental-guidance>
+ <ns2:div>
+ <ns2:p class="align_left">This control is intended to produce the policy and procedures that are required for the effective implementation of selected security controls and control enhancements in the access control family. The policy and procedures are consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. Existing organizational policies and procedures may make the need for additional specific policies and procedures unnecessary. The access control policy can be included as part of the general information security policy for the organization. Access control procedures can be developed for the security program in general and for a particular information system, when required. The organizational risk management strategy is a key factor in the development of the access control policy. Related control: PM-9.</ns2:p>
+ </ns2:div>
+ </supplemental-guidance>
10 years, 11 months
[PATCH] improvements to aesthetics for table display
by Jeffrey Blank
---
RHEL6/transforms/table-style.xslt | 12 +++++++++---
1 files changed, 9 insertions(+), 3 deletions(-)
diff --git a/RHEL6/transforms/table-style.xslt b/RHEL6/transforms/table-style.xslt
index b2fcb80..b099adc 100644
--- a/RHEL6/transforms/table-style.xslt
+++ b/RHEL6/transforms/table-style.xslt
@@ -9,16 +9,22 @@
{
border-collapse:collapse;
}
- table,th, td
+ table, th, td
{
- border: 1px solid black;
+ border: 2px solid #dcdcdc;
+ border-left: none;
+ border-right: none;
vertical-align: top;
- padding: 3px;
+ padding: 2px;
+ font-family: verdana,arial,sans-serif;
+ font-size:11px;
}
+ table tr:nth-child(2n+2) { background-color: #f4f4f4; }
thead
{
display: table-header-group;
font-weight: bold;
+ background-color: #dedede;
}
</style>
</xsl:template>
--
1.7.1
10 years, 11 months
[PATCH] Added refine-value of 1 for var_password_min_age to profile stig-rhel6-server (UNCLASSIFIED)
by Shaw, Ray V CTR USARMY RDECOM ARL (US)
Classification: UNCLASSIFIED
Caveats: NONE
Attached sets the selector to "1" for var_password_min_age in the
stig-rhel6-server profile, so that the check matches the XCCDF and DoD
requirement (PASS_MIN_DAYS set to 1 or higher). Previously, it was not set
and would default to 7 or higher.
--
Ray Shaw
Contractor, STG
Unix support, Army Research Labs
Classification: UNCLASSIFIED
Caveats: NONE
10 years, 11 months
[PATCH] Update to put fix content common functions into plain-text elements
by Francisco Slavin
As per Simon Lukasik's suggestion, pulling common bash functions into XCCDF <plain-text> elements for use by various <fix> elements using <sub> references.
Francisco Slavin (1):
Infrastructure: Update fix transform handling to put common functions
into <plain-text> elements for easy code reuse.
RHEL6/transforms/combinefixes.py | 25 +++++++++++++++++++++++--
RHEL6/transforms/xccdf-addfixes.xslt | 30 +++++++++++++++++++++++++++++-
2 files changed, 52 insertions(+), 3 deletions(-)
10 years, 11 months