From maura at eclipse.ncsc.mil Thu Aug 20 11:36:54 2015 Content-Type: multipart/mixed; boundary="===============1704666061214095181==" MIME-Version: 1.0 From: Maura Dailey To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH] correct several STIG/SSG mappings Date: Fri, 25 Apr 2014 14:42:02 -0400 Message-ID: <535AAC7A.2060105@eclipse.ncsc.mil> In-Reply-To: 294970648F72F5468D5C8718139CA88005AB0327@ukelhp6x.easf.csd.disa.mil --===============1704666061214095181== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Leland, Here is another of the promised followups to your hanging patch = submissions. This patch appears to have been partially applied, perhaps = by a later patchset from another party, and I wanted to follow up with = you to see if there are any hanging ruleid name changes in your queue. Upon careful examination, in the file RHEL/6/auxilary/stig_overlay.xml, = the following ownerids had their ruleids renamed to the values you = suggested: - RHEL-06-000032 - RHEL-06-000099 - RHEL-06-000342 - RHEL-06-000343 - RHEL-06-000344 - RHEL-06-000345 The following was not: - RHEL-06-000163 If RHEL-06-000163 should still be updated to read "nonselected" as its = ruleid, let me know, and I will create a small patch. Here are the = relevant overlay lines for reference: The audit system must switch the system to single-user = mode when available audit storage volume becomes dangerously low. - Maura Dailey On 11/20/2013 03:10 PM, Steinke, Leland J Sr CTR DISA FSO (US) wrote: >>> Would it be simpler to remove the associated XCCDF rules from the STIG >>> profile? >> I actually removed them for a while, but put them back in. At this >> point, the "selected" and "not selected" findings are indicated by the >> presence or absence of the VMS identifiers, respectively. > Ack? > > Thanks, > Leland > -- > Leland Steinke, Security+ > DISA FSO Technical Support Contractor > tapestry technologies, Inc > 717-267-5797 (DSN 570) > leland.j.steinke.ctr(a)mail.mil (gov't) > lsteinke(a)tapestrytech.com (com'l) > > > _______________________________________________ > scap-security-guide mailing list > scap-security-guide(a)lists.fedorahosted.org > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide --===============1704666061214095181== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGh0bWw+CiAgPGhlYWQ+CiAgICA8bWV0YSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRG LTgiIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSI+CiAgPC9oZWFkPgogIDxib2R5IGJnY29sb3I9 IiNGRkZGRkYiIHRleHQ9IiMwMDAwMDAiPgogICAgPGRpdiBjbGFzcz0ibW96LWNpdGUtcHJlZml4 Ij5MZWxhbmQsPGJyPgogICAgICA8YnI+CiAgICAgIEhlcmUgaXMgYW5vdGhlciBvZiB0aGUgcHJv bWlzZWQgZm9sbG93dXBzIHRvIHlvdXIgaGFuZ2luZyBwYXRjaAogICAgICBzdWJtaXNzaW9ucy4g VGhpcyBwYXRjaCBhcHBlYXJzIHRvIGhhdmUgYmVlbiBwYXJ0aWFsbHkgYXBwbGllZCwKICAgICAg cGVyaGFwcyBieSBhIGxhdGVyIHBhdGNoc2V0IGZyb20gYW5vdGhlciBwYXJ0eSwgYW5kIEkgd2Fu dGVkIHRvCiAgICAgIGZvbGxvdyB1cCB3aXRoIHlvdSB0byBzZWUgaWYgdGhlcmUgYXJlIGFueSBo YW5naW5nIHJ1bGVpZCBuYW1lCiAgICAgIGNoYW5nZXMgaW4geW91ciBxdWV1ZS48YnI+CiAgICAg IDxicj4KICAgICAgVXBvbiBjYXJlZnVsIGV4YW1pbmF0aW9uLCBpbiB0aGUgZmlsZQogICAgICBS SEVMLzYvYXV4aWxhcnkvc3RpZ19vdmVybGF5LnhtbCwgdGhlIGZvbGxvd2luZyBvd25lcmlkcyBo YWQgdGhlaXIKICAgICAgcnVsZWlkcyByZW5hbWVkIHRvIHRoZSB2YWx1ZXMgeW91IHN1Z2dlc3Rl ZDo8YnI+CiAgICAgIC0gUkhFTC0wNi0wMDAwMzI8YnI+CiAgICAgIC0gUkhFTC0wNi0wMDAwOTk8 YnI+CiAgICAgIC0gUkhFTC0wNi0wMDAzNDI8YnI+CiAgICAgIC0gUkhFTC0wNi0wMDAzNDM8YnI+ CiAgICAgIC0gUkhFTC0wNi0wMDAzNDQ8YnI+CiAgICAgIC0gUkhFTC0wNi0wMDAzNDU8YnI+CiAg ICAgIDxicj4KICAgICAgVGhlIGZvbGxvd2luZyB3YXMgbm90Ojxicj4KICAgICAgLSBSSEVMLTA2 LTAwMDE2Mzxicj4KICAgICAgPGJyPgogICAgICBJZiBSSEVMLTA2LTAwMDE2MyBzaG91bGQgc3Rp bGwgYmUgdXBkYXRlZCB0byByZWFkICJub25zZWxlY3RlZCIgYXMKICAgICAgaXRzIHJ1bGVpZCwg bGV0IG1lIGtub3csIGFuZCBJIHdpbGwgY3JlYXRlIGEgc21hbGwgcGF0Y2guIEhlcmUgYXJlCiAg ICAgIHRoZSByZWxldmFudCBvdmVybGF5IGxpbmVzIGZvciByZWZlcmVuY2U6PGJyPgogICAgICA8 YnI+CiAgICAgIMKgwqDCoCAmbHQ7b3ZlcmxheSBvd25lcj0iZGlzYXN0aWciCiAgICAgIHJ1bGVp ZD0iY29uZmlndXJlX2F1ZGl0ZF9hZG1pbl9zcGFjZV9sZWZ0X2FjdGlvbiIKICAgICAgb3duZXJp ZD0iUkhFTC0wNi0wMDAxNjMiIGRpc2E9IjEzNDMiIHNldmVyaXR5PSJtZWRpdW0iJmd0Ozxicj4K ICAgICAgwqDCoMKgwqDCoMKgwqAgJmx0O3RpdGxlJmd0O1RoZSBhdWRpdCBzeXN0ZW0gbXVzdCBz d2l0Y2ggdGhlIHN5c3RlbSB0bwogICAgICBzaW5nbGUtdXNlciBtb2RlIHdoZW4gYXZhaWxhYmxl IGF1ZGl0IHN0b3JhZ2Ugdm9sdW1lIGJlY29tZXMKICAgICAgZGFuZ2Vyb3VzbHkgbG93LiZsdDsv dGl0bGUmZ3Q7PGJyPgogICAgICDCoMKgwqAgJmx0Oy9vdmVybGF5Jmd0Ozxicj4KICAgICAgPGJy PgogICAgICAtIE1hdXJhIERhaWxleTxicj4KICAgICAgPGJyPgogICAgICBPbiAxMS8yMC8yMDEz IDAzOjEwIFBNLCBTdGVpbmtlLCBMZWxhbmQgSiBTciBDVFIgRElTQSBGU08gKFVTKQogICAgICB3 cm90ZTo8YnI+CiAgICA8L2Rpdj4KICAgIDxibG9ja3F1b3RlCmNpdGU9Im1pZDoyOTQ5NzA2NDhG NzJGNTQ2OEQ1Qzg3MTgxMzlDQTg4MDA1QUIwMzI3QHVrZWxocDZ4LmVhc2YuY3NkLmRpc2EubWls IgogICAgICB0eXBlPSJjaXRlIj4KICAgICAgPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSI+CiAgICAg ICAgPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSI+CiAgICAgICAgICA8cHJlIHdyYXA9IiI+V291bGQg aXQgYmUgc2ltcGxlciB0byByZW1vdmUgdGhlIGFzc29jaWF0ZWQgWENDREYgcnVsZXMgZnJvbSB0 aGUgU1RJRwpwcm9maWxlPwo8L3ByZT4KICAgICAgICA8L2Jsb2NrcXVvdGU+CiAgICAgICAgPHBy ZSB3cmFwPSIiPgpJIGFjdHVhbGx5IHJlbW92ZWQgdGhlbSBmb3IgYSB3aGlsZSwgYnV0IHB1dCB0 aGVtIGJhY2sgaW4uICBBdCB0aGlzCnBvaW50LCB0aGUgInNlbGVjdGVkIiBhbmQgIm5vdCBzZWxl Y3RlZCIgZmluZGluZ3MgYXJlIGluZGljYXRlZCBieSB0aGUKcHJlc2VuY2Ugb3IgYWJzZW5jZSBv ZiB0aGUgVk1TIGlkZW50aWZpZXJzLCByZXNwZWN0aXZlbHkuCjwvcHJlPgogICAgICA8L2Jsb2Nr cXVvdGU+CiAgICAgIDxwcmUgd3JhcD0iIj4KQWNrPwoKVGhhbmtzLApMZWxhbmQKLS0KTGVsYW5k IFN0ZWlua2UsIFNlY3VyaXR5KwpESVNBIEZTTyBUZWNobmljYWwgU3VwcG9ydCBDb250cmFjdG9y CnRhcGVzdHJ5IHRlY2hub2xvZ2llcywgSW5jCjcxNy0yNjctNTc5NyAoRFNOIDU3MCkKPGEgY2xh c3M9Im1vei10eHQtbGluay1hYmJyZXZpYXRlZCIgaHJlZj0ibWFpbHRvOmxlbGFuZC5qLnN0ZWlu a2UuY3RyQG1haWwubWlsIj5sZWxhbmQuai5zdGVpbmtlLmN0ckBtYWlsLm1pbDwvYT4gKGdvdid0 KQo8YSBjbGFzcz0ibW96LXR4dC1saW5rLWFiYnJldmlhdGVkIiBocmVmPSJtYWlsdG86bHN0ZWlu a2VAdGFwZXN0cnl0ZWNoLmNvbSI+bHN0ZWlua2VAdGFwZXN0cnl0ZWNoLmNvbTwvYT4gKGNvbSds KQo8L3ByZT4KICAgICAgPGJyPgogICAgICA8ZmllbGRzZXQgY2xhc3M9Im1pbWVBdHRhY2htZW50 SGVhZGVyIj48L2ZpZWxkc2V0PgogICAgICA8YnI+CiAgICAgIDxwcmUgd3JhcD0iIj5fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpzY2FwLXNlY3VyaXR5LWd1 aWRlIG1haWxpbmcgbGlzdAo8YSBjbGFzcz0ibW96LXR4dC1saW5rLWFiYnJldmlhdGVkIiBocmVm PSJtYWlsdG86c2NhcC1zZWN1cml0eS1ndWlkZUBsaXN0cy5mZWRvcmFob3N0ZWQub3JnIj5zY2Fw LXNlY3VyaXR5LWd1aWRlQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmc8L2E+CjxhIGNsYXNzPSJtb3ot dHh0LWxpbmstZnJlZXRleHQiIGhyZWY9Imh0dHBzOi8vbGlzdHMuZmVkb3JhaG9zdGVkLm9yZy9t YWlsbWFuL2xpc3RpbmZvL3NjYXAtc2VjdXJpdHktZ3VpZGUiPmh0dHBzOi8vbGlzdHMuZmVkb3Jh aG9zdGVkLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjYXAtc2VjdXJpdHktZ3VpZGU8L2E+CjwvcHJl PgogICAgPC9ibG9ja3F1b3RlPgogICAgPGJyPgogIDwvYm9keT4KPC9odG1sPgo= --===============1704666061214095181==--