From blank at eclipse.ncsc.mil Thu Aug 20 11:32:57 2015 Content-Type: multipart/mixed; boundary="===============2029602847045756449==" MIME-Version: 1.0 From: Jeffrey Blank To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH 1/6] Removed CCI references from Group tag and added to appropriate Rule tag. Date: Mon, 17 Dec 2012 09:21:33 -0500 Message-ID: <50CF2A6D.4080709@eclipse.ncsc.mil> In-Reply-To: 1355719092-1253-1-git-send-email-mnewman@redhat.com --===============2029602847045756449== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Some of the patches in this set may conflict with what I've pushed. If not, feel free to push. If there are conflicts, there may be a need to hand-edit and re-commit. Also, please use a cover sheet (-s). This is in the wiki with other commit instructions (such as validating before committing). Let's sync today on some of the remaining TODOs. We'll likely want to focus on providing credible explanations for SRG mapping choices. Thanks, Jeff On 12/16/2012 11:38 PM, Michele Newman wrote: > --- > RHEL6/input/services/ssh.xml | 8 +++----- > 1 files changed, 3 insertions(+), 5 deletions(-) > = > diff --git a/RHEL6/input/services/ssh.xml b/RHEL6/input/services/ssh.xml > index 9069e30..576f9ac 100644 > --- a/RHEL6/input/services/ssh.xml > +++ b/RHEL6/input/services/ssh.xml > @@ -8,7 +8,6 @@ implementation included with the system is called OpenSSH= , and more > detailed documentation is available from its website, > http://www.openssh.org. Its server program is called sshd and > provided by the RPM package openssh-server. > - > = > operator=3D"equals" interactive=3D"0"> > @@ -59,7 +58,6 @@ certain changes should be made to the OpenSSH daemon co= nfiguration > file /etc/ssh/sshd_config. The following recommendations can be > applied to this file. See the sshd_config(5) man page for more > detailed information. > - > = > > Allow Only SSH Protocol 2 > @@ -82,7 +80,7 @@ should not be used. > > > > - > + > > > = > @@ -289,7 +287,7 @@ even in the event of misconfiguration elsewhere. > > > > - > + > > > = > @@ -362,7 +360,7 @@ implementation. These are also required for complianc= e. > > > > - > + > > > =20 --===============2029602847045756449==--