From shawn at redhat.com Thu Aug 20 11:32:20 2015 Content-Type: multipart/mixed; boundary="===============5261367352743584509==" MIME-Version: 1.0 From: Shawn Wells To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH 1/6] Test Tags for input/system/software/updating.xml Date: Sun, 30 Sep 2012 13:24:47 -0400 Message-ID: <5068805F.4070404@redhat.com> In-Reply-To: 20120930043301.GA5514@mobile.dude.localdomain --===============5261367352743584509== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 9/30/12 12:33 AM, Michael J. McConachie wrote: > > 0001-Test-Tags-for-input-system-software-updating.xml.patch > > > From ebc068bd50d3761e36ad66649e53c3dc48b29d8e Mon Sep 17 00:00:00 2001 > From: Michael McConachie > Date: Fri, 28 Sep 2012 22:50:52 -0400 > Subject: [PATCH 1/6] Test Tags for input/system/software/updating.xml > > --- > RHEL6/input/system/software/updating.xml | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/RHEL6/input/system/software/updating.xml b/RHEL6/input/syste= m/software/updating.xml > index ac9e590..1cbaae2 100644 > --- a/RHEL6/input/system/software/updating.xml > +++ b/RHEL6/input/system/software/updating.xml > @@ -56,8 +56,8 @@ the [main] section: > > > To determine whether yum is configured to use gpgcheck, > -inspect /etc/yum.conf and ensure that the following appears in = the > -[main] section: > +inspect /etc/yum.conf and /etc/yum.repos.d/(reponame).repo<= /tt> > +to ensure that the following appears in the [main] section: >
gpgcheck=3D1
> A value of 1 indicates that gpgcheck is enabled. Abse= nce of a > gpgcheck line or a setting of 0 indicates that it is > -- 1.7.11.4 Ack to the validity of checking both /etc/yum.conf and /etc/yum.repos.d/* In review, is there a reason why we should have both of the following rules? " Ensure gpgcheck Enabled In Main Yum Configuration" and " Ensure gpgcheck Enabled For All Yum Package Repositories" Seems to make sense to combine the two into a single rule, likely using = the , and from " Ensure gpgcheck Enabled = In Main Yum Configuration" but the from " Ensure gpgcheck = Enabled For All Yum Package Repositories" Mike, could you knock that out? (unless you or someone else see validity = in having a "check all repos" and then another rule checking a specific = one. Seems redundant. --===============5261367352743584509== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGh0bWw+CiAgPGhlYWQ+CiAgICA8bWV0YSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRG LTgiIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSI+CiAgPC9oZWFkPgogIDxib2R5IGJnY29sb3I9 IiNGRkZGRkYiIHRleHQ9IiMwMDAwMDAiPgogICAgPGRpdiBjbGFzcz0ibW96LWNpdGUtcHJlZml4 Ij5PbiA5LzMwLzEyIDEyOjMzIEFNLCBNaWNoYWVsIEouCiAgICAgIE1jQ29uYWNoaWUgd3JvdGU6 PGJyPgogICAgPC9kaXY+CiAgICA8YmxvY2txdW90ZSBjaXRlPSJtaWQ6MjAxMjA5MzAwNDMzMDEu R0E1NTE0QG1vYmlsZS5kdWRlLmxvY2FsZG9tYWluIgogICAgICB0eXBlPSJjaXRlIj48YnI+CiAg ICAgIDxmaWVsZHNldCBjbGFzcz0ibWltZUF0dGFjaG1lbnRIZWFkZXIiPjxsZWdlbmQKICAgICAg ICAgIGNsYXNzPSJtaW1lQXR0YWNobWVudEhlYWRlck5hbWUiPjAwMDEtVGVzdC1UYWdzLWZvci1p bnB1dC1zeXN0ZW0tc29mdHdhcmUtdXBkYXRpbmcueG1sLnBhdGNoPC9sZWdlbmQ+PC9maWVsZHNl dD4KICAgICAgPGJyPgogICAgICA8ZGl2IGNsYXNzPSJtb3otdGV4dC1wbGFpbiIgd3JhcD0idHJ1 ZSIgZ3JhcGhpY2FsLXF1b3RlPSJ0cnVlIgogICAgICAgIHN0eWxlPSJmb250LWZhbWlseTogLW1v ei1maXhlZDsgZm9udC1zaXplOiAxMnB4OyIKICAgICAgICBsYW5nPSJ4LXdlc3Rlcm4iPgogICAg ICAgIDxwcmUgd3JhcD0iIj5Gcm9tIGViYzA2OGJkNTBkMzc2MWUzNmFkNjY2NDllNTNjM2RjNDhi MjlkOGUgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCkZyb206IE1pY2hhZWwgTWNDb25hY2hpZSA8 YSBtb3otZG8tbm90LXNlbmQ9InRydWUiIGNsYXNzPSJtb3otdHh0LWxpbmstcmZjMjM5NkUiIGhy ZWY9Im1haWx0bzptaWNoYWVsQHJlZGhhdC5jb20iPiZsdDttaWNoYWVsQHJlZGhhdC5jb20mZ3Q7 PC9hPgpEYXRlOiBGcmksIDI4IFNlcCAyMDEyIDIyOjUwOjUyIC0wNDAwClN1YmplY3Q6IFtQQVRD SCAxLzZdIFRlc3QgVGFncyBmb3IgaW5wdXQvc3lzdGVtL3NvZnR3YXJlL3VwZGF0aW5nLnhtbAoK LS0tCiBSSEVMNi9pbnB1dC9zeXN0ZW0vc29mdHdhcmUvdXBkYXRpbmcueG1sIHwgNCArKy0tCiAx IGZpbGUgY2hhbmdlZCwgMiBpbnNlcnRpb25zKCspLCAyIGRlbGV0aW9ucygtKQoKZGlmZiAtLWdp dCBhL1JIRUw2L2lucHV0L3N5c3RlbS9zb2Z0d2FyZS91cGRhdGluZy54bWwgYi9SSEVMNi9pbnB1 dC9zeXN0ZW0vc29mdHdhcmUvdXBkYXRpbmcueG1sCmluZGV4IGFjOWU1OTAuLjFjYmFhZTIgMTAw NjQ0Ci0tLSBhL1JIRUw2L2lucHV0L3N5c3RlbS9zb2Z0d2FyZS91cGRhdGluZy54bWwKKysrIGIv UkhFTDYvaW5wdXQvc3lzdGVtL3NvZnR3YXJlL3VwZGF0aW5nLnhtbApAQCAtNTYsOCArNTYsOCBA QCB0aGUgJmx0O3R0Jmd0O1ttYWluXSZsdDsvdHQmZ3Q7IHNlY3Rpb246CiAmbHQ7L2Rlc2NyaXB0 aW9uJmd0OwogJmx0O29jaWwgY2xhdXNlPSJHUEcgY2hlY2tpbmcgaXNuJ3QgZW5hYmxlZCImZ3Q7 CiBUbyBkZXRlcm1pbmUgd2hldGhlciAmbHQ7dHQmZ3Q7eXVtJmx0Oy90dCZndDsgaXMgY29uZmln dXJlZCB0byB1c2UgJmx0O3R0Jmd0O2dwZ2NoZWNrJmx0Oy90dCZndDssCi1pbnNwZWN0ICZsdDt0 dCZndDsvZXRjL3l1bS5jb25mJmx0Oy90dCZndDsgYW5kIGVuc3VyZSB0aGF0IHRoZSBmb2xsb3dp bmcgYXBwZWFycyBpbiB0aGUKLSZsdDt0dCZndDtbbWFpbl0mbHQ7L3R0Jmd0OyBzZWN0aW9uOgor aW5zcGVjdCAmbHQ7dHQmZ3Q7PGkgY2xhc3M9Im1vei10eHQtc2xhc2giPjxzcGFuIGNsYXNzPSJt b3otdHh0LXRhZyI+Lzwvc3Bhbj5ldGMveXVtLmNvbmYmbHQ7L3R0Jmd0OyBhbmQgJmx0O3R0Jmd0 Oy9ldGMveXVtLnJlcG9zLmQ8c3BhbiBjbGFzcz0ibW96LXR4dC10YWciPi88L3NwYW4+PC9pPihy ZXBvbmFtZSkucmVwbyZsdDsvdHQmZ3Q7Cit0byBlbnN1cmUgdGhhdCB0aGUgZm9sbG93aW5nIGFw cGVhcnMgaW4gdGhlICZsdDt0dCZndDtbbWFpbl0mbHQ7L3R0Jmd0OyBzZWN0aW9uOgogJmx0O3By ZSZndDtncGdjaGVjaz0xJmx0Oy9wcmUmZ3Q7CiBBIHZhbHVlIG9mICZsdDt0dCZndDsxJmx0Oy90 dCZndDsgaW5kaWNhdGVzIHRoYXQgJmx0O3R0Jmd0O2dwZ2NoZWNrJmx0Oy90dCZndDsgaXMgZW5h YmxlZC4gQWJzZW5jZSBvZiBhCiAmbHQ7dHQmZ3Q7Z3BnY2hlY2smbHQ7L3R0Jmd0OyBsaW5lIG9y IGEgc2V0dGluZyBvZiAmbHQ7dHQmZ3Q7MCZsdDsvdHQmZ3Q7IGluZGljYXRlcyB0aGF0IGl0IGlz CjxkaXYgY2xhc3M9Im1vei10eHQtc2lnIj4tLSAKMS43LjExLjQKCjwvZGl2PjwvcHJlPgogICAg ICA8L2Rpdj4KICAgIDwvYmxvY2txdW90ZT4KICAgIEFjayB0byB0aGUgdmFsaWRpdHkgb2YgY2hl Y2tpbmcgYm90aCAvZXRjL3l1bS5jb25mIGFuZAogICAgL2V0Yy95dW0ucmVwb3MuZC8qPGJyPgog ICAgPGJyPgogICAgSW4gcmV2aWV3LCBpcyB0aGVyZSBhIHJlYXNvbiB3aHkgd2Ugc2hvdWxkIGhh dmUgYm90aCBvZiB0aGUKICAgIGZvbGxvd2luZyBydWxlcz88YnI+CiAgICAiCiAgICA8bWV0YSBj aGFyc2V0PSJ1dGYtOCI+CiAgICA8bWV0YSBjaGFyc2V0PSJ1dGYtOCI+CiAgICA8c3BhbiBzdHls ZT0iY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IFRpbWVzOyBmb250LXNpemU6CiAg ICAgIG1lZGl1bTsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6CiAgICAgIG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWln aHQ6IG5vcm1hbDsgb3JwaGFuczogMjsKICAgICAgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOwogICAgICB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3aWRvd3M6IDI7IHdvcmQtc3BhY2luZzogMHB4OwogICAgICAtd2Via2l0LXRleHQtc2l6ZS1h ZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsKICAgICAgZGlzcGxh eTogaW5saW5lICFpbXBvcnRhbnQ7IGZsb2F0OiBub25lOyAiPkVuc3VyZSBncGdjaGVjayBFbmFi bGVkCiAgICAgIEluIE1haW4gWXVtIENvbmZpZ3VyYXRpb248L3NwYW4+IiBhbmQ8YnI+CiAgICAi CiAgICA8bWV0YSBjaGFyc2V0PSJ1dGYtOCI+CiAgICA8c3BhbiBzdHlsZT0iY29sb3I6IHJnYigw LCAwLCAwKTsgZm9udC1mYW1pbHk6IFRpbWVzOyBmb250LXNpemU6CiAgICAgIG1lZGl1bTsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6CiAgICAg IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3Jw aGFuczogMjsKICAgICAgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOwogICAgICB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IDI7IHdv cmQtc3BhY2luZzogMHB4OwogICAgICAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsKICAgICAgZGlzcGxheTogaW5saW5lICFpbXBv cnRhbnQ7IGZsb2F0OiBub25lOyAiPkVuc3VyZSBncGdjaGVjayBFbmFibGVkCiAgICAgIEZvciBB bGwgWXVtIFBhY2thZ2UgUmVwb3NpdG9yaWVzPC9zcGFuPiI8YnI+CiAgICA8YnI+CiAgICBTZWVt cyB0byBtYWtlIHNlbnNlIHRvIGNvbWJpbmUgdGhlIHR3byBpbnRvIGEgc2luZ2xlIHJ1bGUsIGxp a2VseQogICAgdXNpbmcgdGhlICZsdDtkZXNjcmlwdGlvbiZndDssICZsdDtvY2lsJmd0OyBhbmQg Jmx0O3JhdGlvbmFsZSZndDsKICAgIGZyb20gIgogICAgPG1ldGEgY2hhcnNldD0idXRmLTgiPgog ICAgPHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBUaW1lczsg Zm9udC1zaXplOgogICAgICBtZWRpdW07IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 OiBub3JtYWw7IGZvbnQtd2VpZ2h0OgogICAgICBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhhbnM6IDI7CiAgICAgIHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsKICAgICAgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd2lkb3dzOiAyOyB3b3JkLXNwYWNpbmc6IDBweDsKICAgICAgLXdlYmtp dC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 CiAgICAgIGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyBmbG9hdDogbm9uZTsgIj5FbnN1cmUg Z3BnY2hlY2sgRW5hYmxlZAogICAgICBJbiBNYWluIFl1bSBDb25maWd1cmF0aW9uPC9zcGFuPiIg YnV0IHRoZSAmbHQ7dGl0bGUmZ3Q7IGZyb20gIgogICAgPG1ldGEgY2hhcnNldD0idXRmLTgiPgog ICAgPHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBUaW1lczsg Zm9udC1zaXplOgogICAgICBtZWRpdW07IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 OiBub3JtYWw7IGZvbnQtd2VpZ2h0OgogICAgICBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhhbnM6IDI7CiAgICAgIHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsKICAgICAgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd2lkb3dzOiAyOyB3b3JkLXNwYWNpbmc6IDBweDsKICAgICAgLXdlYmtp dC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 CiAgICAgIGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyBmbG9hdDogbm9uZTsgIj5FbnN1cmUg Z3BnY2hlY2sgRW5hYmxlZAogICAgICBGb3IgQWxsIFl1bSBQYWNrYWdlIFJlcG9zaXRvcmllczwv c3Bhbj4iPGJyPgogICAgPGJyPgogICAgTWlrZSwgY291bGQgeW91IGtub2NrIHRoYXQgb3V0PyAo dW5sZXNzIHlvdSBvciBzb21lb25lIGVsc2Ugc2VlCiAgICB2YWxpZGl0eSBpbiBoYXZpbmcgYSAi Y2hlY2sgYWxsIHJlcG9zIiBhbmQgdGhlbiBhbm90aGVyIHJ1bGUKICAgIGNoZWNraW5nIGEgc3Bl Y2lmaWMgb25lLiBTZWVtcyByZWR1bmRhbnQuIDxicj4KICAgIDxicj4KICA8L2JvZHk+CjwvaHRt bD4K --===============5261367352743584509==--