From maura at eclipse.ncsc.mil Thu Aug 20 11:34:10 2015 Content-Type: multipart/mixed; boundary="===============8848657068084618245==" MIME-Version: 1.0 From: Maura Dailey To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH] deletion of unused OVAL checks Date: Mon, 20 May 2013 13:22:28 -0400 Message-ID: <519A5BD4.1000609@eclipse.ncsc.mil> In-Reply-To: 1368761284-3407-2-git-send-email-blank@eclipse.ncsc.mil --===============8848657068084618245== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 05/16/2013 11:28 PM, Jeffrey Blank wrote: > Signed-off-by: Jeffrey Blank > --- > .../accounts_no_nis_inclusions_etc_group.xml | 23 ----- > RHEL6/input/checks/accounts_wheel_exists.xml | 29 ------ > RHEL6/input/checks/cups_limit_browsing.xml | 23 ----- > .../input/checks/file_group_owner_etc_crontab.xml | 25 ----- > .../input/checks/file_owner_ldap_server_files.xml | 31 ------ > .../checks/file_permissions_ldap_server_files.xml | 38 ------- > RHEL6/input/checks/iptables_cupsd_disabled.xml | 41 -------- > RHEL6/input/checks/iptables_icmp_disabled.xml | 105 -------------= ------- > .../checks/network_ipv6_disable_interfaces.xml | 59 ----------- > .../checks/no_shelllogin_for_systemaccounts.xml | 25 ----- > .../checks/package_cronie-anacron_removed.xml | 25 ----- > .../input/checks/package_isdn4k-utils_removed.xml | 25 ----- > RHEL6/input/checks/package_ntpdate_installed.xml | 25 ----- > RHEL6/input/checks/service_isdn_disabled.xml | 99 -------------= ----- > RHEL6/input/checks/service_mcstrans_disabled.xml | 96 -------------= ----- > RHEL6/input/checks/sysconfig_ipv6_autoconf.xml | 33 ------ > RHEL6/input/checks/templates/packages_removed.csv | 3 - > RHEL6/input/checks/templates/services_disabled.csv | 2 - > 18 files changed, 0 insertions(+), 707 deletions(-) > delete mode 100644 RHEL6/input/checks/accounts_no_nis_inclusions_etc_gr= oup.xml > delete mode 100644 RHEL6/input/checks/accounts_wheel_exists.xml > delete mode 100644 RHEL6/input/checks/cups_limit_browsing.xml > delete mode 100644 RHEL6/input/checks/file_group_owner_etc_crontab.xml > delete mode 100644 RHEL6/input/checks/file_owner_ldap_server_files.xml > delete mode 100644 RHEL6/input/checks/file_permissions_ldap_server_file= s.xml > delete mode 100644 RHEL6/input/checks/iptables_cupsd_disabled.xml > delete mode 100644 RHEL6/input/checks/iptables_icmp_disabled.xml > delete mode 100644 RHEL6/input/checks/network_ipv6_disable_interfaces.x= ml > delete mode 100644 RHEL6/input/checks/no_shelllogin_for_systemaccounts.= xml > delete mode 100644 RHEL6/input/checks/package_cronie-anacron_removed.xml > delete mode 100644 RHEL6/input/checks/package_isdn4k-utils_removed.xml > delete mode 100644 RHEL6/input/checks/package_ntpdate_installed.xml > delete mode 100644 RHEL6/input/checks/service_isdn_disabled.xml > delete mode 100644 RHEL6/input/checks/service_mcstrans_disabled.xml > delete mode 100644 RHEL6/input/checks/sysconfig_ipv6_autoconf.xml > > diff --git a/RHEL6/input/checks/accounts_no_nis_inclusions_etc_group.xml = b/RHEL6/input/checks/accounts_no_nis_inclusions_etc_group.xml > deleted file mode 100644 > index 90adc23..0000000 > --- a/RHEL6/input/checks/accounts_no_nis_inclusions_etc_group.xml > +++ /dev/null > @@ -1,23 +0,0 @@ > - > - > - > - Remove Legacy + Entries From /etc/group > - > - Red Hat Enterprise Linux 6 > - > - NIS file inclusions should be set appropriately in th= e /etc/group file. > - > - > - > - > - > - > - > - > - > - /etc > - group > - ^\+ > - 1 > - > - > diff --git a/RHEL6/input/checks/accounts_wheel_exists.xml b/RHEL6/input/c= hecks/accounts_wheel_exists.xml > deleted file mode 100644 > index 82dc22e..0000000 > --- a/RHEL6/input/checks/accounts_wheel_exists.xml > +++ /dev/null > @@ -1,29 +0,0 @@ > - > - - id=3D"accounts_wheel_exists" version=3D"1"> > - > - Limit su Access to the wheel group > - > - Red Hat Enterprise Linux 6 > - > - The wheel group should exist > - > - > - - test_ref=3D"test_20065" /> > - > - > - - check_existence=3D"all_exist" > - comment=3D"Tests the value of the <:begin:>wheel setting in the = /etc/group file" > - id=3D"test_20065" version=3D"1"> > - > - > - - version=3D"1"> > - /etc > - group > - ^[\s]*wheel:.*$ > - 1 > - > - > diff --git a/RHEL6/input/checks/cups_limit_browsing.xml b/RHEL6/input/che= cks/cups_limit_browsing.xml > deleted file mode 100644 > index 3531034..0000000 > --- a/RHEL6/input/checks/cups_limit_browsing.xml > +++ /dev/null > @@ -1,23 +0,0 @@ > - > - - id=3D"cups_limit_browsing" version=3D"1"> > - > - Limit Printer Browsing to a Particular Subnet if Necessary<= /title> > - <affected family=3D"unix"> > - <platform>Red Hat Enterprise Linux 6</platform> > - </affected> > - <description>By default, when printer sharing is enabled, CUPS wil= l broadcast to every network that its host machine is connected to through = all available network interfaces on port 631. It will also listen to incomi= ng broadcasts from other machines on the network. Either list one BrowseAdd= ress line for each client machine and one BrowseAllow line for each print s= erver or use one of the supported shorthand notations that the CUPS service= recognizes. Please see the cupsd.conf(5) man page or the documentation pro= vided at http://www.cups.org for more information on other ways to format t= hese directives.</description> > - </metadata> > - <criteria operator=3D"OR"> > - <extend_definition comment=3D"Disable browsing or..." > - definition_ref=3D"cups_disable_browsing" /> > - <criteria operator=3D"AND"> > - <extend_definition comment=3D"restrict via the BrowseAddress dir= ective and..." > - definition_ref=3D"cups_limit_browsing_browseaddress" /> > - <extend_definition comment=3D"restrict via BrowseDeny then Brows= eAllow directives" > - definition_ref=3D"cups_limit_browsing_browsedenyallow" /> > - </criteria> > - </criteria> > - </definition> > - > -</def-group> > diff --git a/RHEL6/input/checks/file_group_owner_etc_crontab.xml b/RHEL6/= input/checks/file_group_owner_etc_crontab.xml > deleted file mode 100644 > index 9f3dad8..0000000 > --- a/RHEL6/input/checks/file_group_owner_etc_crontab.xml > +++ /dev/null > @@ -1,25 +0,0 @@ > -<def-group> > - <definition class=3D"compliance" id=3D"file_group_owner_etc_crontab" v= ersion=3D"1"> > - <metadata> > - <title>Check Group Ownership /etc/crontab > - > - Red Hat Enterprise Linux 6 > - > - The file /etc/crontab should be owned by the root gro= up. > - > - > - > - > - > - > - > - > - > - > - /etc > - crontab > - > - > - 0 > - > - > diff --git a/RHEL6/input/checks/file_owner_ldap_server_files.xml b/RHEL6/= input/checks/file_owner_ldap_server_files.xml > deleted file mode 100644 > index b4428da..0000000 > --- a/RHEL6/input/checks/file_owner_ldap_server_files.xml > +++ /dev/null > @@ -1,31 +0,0 @@ > - > - - id=3D"file_owner_ldap_server_files" version=3D"1"> > - > - Verify User Who Owns The LDAP Server Files > - > - Red Hat Enterprise Linux 6 > - > - The /var/lib/ldap/* files should be owned by user lda= p. > - > - > - - test_ref=3D"test_20143" /> > - > - > - - comment=3D"Testing user ownership of /var/lib/ldap/*" > - id=3D"test_20143" version=3D"1"> > - > - > - > - - version=3D"1"> > - 55 > - > - - id=3D"obj_20143" version=3D"1"> > - /var/lib/ldap > - .* > - > - > diff --git a/RHEL6/input/checks/file_permissions_ldap_server_files.xml b/= RHEL6/input/checks/file_permissions_ldap_server_files.xml > deleted file mode 100644 > index 73423e1..0000000 > --- a/RHEL6/input/checks/file_permissions_ldap_server_files.xml > +++ /dev/null > @@ -1,38 +0,0 @@ > - > - - id=3D"file_permissions_ldap_server_files" version=3D"1"> > - > - Verify Permissions On LDAP Server Files > - > - Red Hat Enterprise Linux 6 > - > - The /var/lib/ldap/* files should have the appropriate= permissions. > - > - > - > - > - > - - id=3D"test_file_permissions_ldap_server_files" version=3D"1"> > - > - > - > - - version=3D"1"> > - true > - true > - false > - true > - false > - false > - false > - false > - false > - > - - id=3D"object_file_permissions_ldap_server_files" version=3D"1"> > - > - /var/lib/ldap > - ^.*$ > - > - > diff --git a/RHEL6/input/checks/iptables_cupsd_disabled.xml b/RHEL6/input= /checks/iptables_cupsd_disabled.xml > deleted file mode 100644 > index 24197f2..0000000 > --- a/RHEL6/input/checks/iptables_cupsd_disabled.xml > +++ /dev/null > @@ -1,41 +0,0 @@ > - > - - id=3D"iptables_cupsd_disabled" version=3D"1"> > - > - Firewall Access to Printing Service > - > - Red Hat Enterprise Linux 6 > - > - Firewall access to printing service should be > - disabled unless required > - > - > - > - > - > - > - - check_existence=3D"none_exist" comment=3D"Check iptables" > - id=3D"test_iptables_cupsd_disabled_iptables" version=3D"1"> > - > - > - - id=3D"obj_iptables_cupsd_disabled_iptables" version=3D"1"> > - /etc/sysconfig > - iptables > - ^-A INPUT -p (?:(?:udp)|(?:= tcp)) -m (?:(?:udp)|(?:tcp)) --dport 631 -j ACCEPT$ > - 1 > - > - - check_existence=3D"none_exist" comment=3D"Check ipv6 tables" > - id=3D"test_iptables_cupsd_disabled_ip6tables" version=3D"1"> > - > - > - - id=3D"obj_iptables_cupsd_disabled_ip6tables" version=3D"1"> > - /etc/sysconfig > - ip6tables > - ^-A INPUT -p (?:(?:udp)|(?:= tcp)) -m (?:(?:udp)|(?:tcp)) --dport 631 -j ACCEPT$ > - 1 > - > - > diff --git a/RHEL6/input/checks/iptables_icmp_disabled.xml b/RHEL6/input/= checks/iptables_icmp_disabled.xml > deleted file mode 100644 > index ec1b31e..0000000 > --- a/RHEL6/input/checks/iptables_icmp_disabled.xml > +++ /dev/null > @@ -1,105 +0,0 @@ > - > - - id=3D"iptables_icmp_disabled" version=3D"1"> > - > - Restrict ICMP > - > - Red Hat Enterprise Linux 6 > - > - Firewall should restrict icmp at iptables and iptable= s6 > - > - > - - test_ref=3D"test_iptables_icmp_disabled_restrict_icmp_ipv4" /> > - - test_ref=3D"test_iptables_icmp_disabled_echo_reply_ipv4" /> > - - test_ref=3D"test_iptables_icmp_disabled_destication_unreachable_ip= v4" /> > - - test_ref=3D"test_iptables_icmp_disabled_time_exceeded_ipv4" /> > - - test_ref=3D"test_iptables_icmp_disabled_drop_echo_request_ipv6" /> > - - test_ref=3D"test_iptables_icmp_disabled_drop_router_advertisement_= ipv6" /> > - > - > - > - - check_existence=3D"none_exist" comment=3D"Check iptables" > - id=3D"test_iptables_icmp_disabled_restrict_icmp_ipv4" version=3D"1"> > - > - > - - id=3D"obj_iptables_icmp_disabled_restrict_icmp_ipv4" version=3D"1"> > - /etc/sysconfig > - iptables > - ^-A INPUT\s+-p\s+icmp\s+--i= cmp-type\s+any\s+-j\s+ACCEPT$ > - 1 > - > - > - - check_existence=3D"all_exist" comment=3D"Check iptables" > - id=3D"test_iptables_icmp_disabled_echo_reply_ipv4" version=3D"1"> > - > - > - - id=3D"obj_iptables_icmp_disabled_echo_reply_ipv4" version=3D"1"> > - /etc/sysconfig > - iptables > - ^-A INPUT\s+-p\s+icmp\s+--i= cmp-type\s+echo-reply\s+-j\s+ACCEPT$ > - 1 > - > - > - - check_existence=3D"all_exist" comment=3D"Check iptables" > - id=3D"test_iptables_icmp_disabled_destication_unreachable_ipv4" versio= n=3D"1"> > - > - > - - id=3D"obj_iptables_icmp_disabled_destication_unreachable_ipv4" version= =3D"1"> > - /etc/sysconfig > - iptables > - ^-A INPUT\s+-p\s+icmp\s+--i= cmp-type\s+destination-unreachable\s+-j\s+ACCEPT$ > - 1 > - > - > - - check_existence=3D"all_exist" comment=3D"Check iptables" > - id=3D"test_iptables_icmp_disabled_time_exceeded_ipv4" version=3D"1"> > - > - > - - id=3D"obj_iptables_icmp_disabled_time_exceeded_ipv4" version=3D"1"> > - /etc/sysconfig > - iptables > - ^-A INPUT\s+-p\s+icmp\s+--i= cmp-type\s+time-exceeded\s+-j\s+ACCEPT$ > - 1 > - > - > - - check_existence=3D"all_exist" comment=3D"Check iptables" > - id=3D"test_iptables_icmp_disabled_drop_echo_request_ipv6" version=3D"1= "> > - > - > - - id=3D"obj_iptables_icmp_disabled_drop_echo_request_ipv6" version=3D"1"> > - /etc/sysconfig > - ip6tables > - ^-A INPUT\s+-p\s+icmpv6\s+-= -icmpv6-type\s+echo-request\s+-j\s+DROP$ > - 1 > - > - > - - check_existence=3D"all_exist" comment=3D"Check iptables" > - id=3D"test_iptables_icmp_disabled_drop_router_advertisement_ipv6" vers= ion=3D"1"> > - > - > - - id=3D"obj_iptables_icmp_disabled_drop_router_advertisement_ipv6" versi= on=3D"1"> > - /etc/sysconfig > - ip6tables > - ^-A INPUT\s+-p\s+icmpv6\s+-= -icmpv6-type\s+router-advertisement\s+-j\s+DROP$ > - 1 > - > - > - > diff --git a/RHEL6/input/checks/network_ipv6_disable_interfaces.xml b/RHE= L6/input/checks/network_ipv6_disable_interfaces.xml > deleted file mode 100644 > index 4c42744..0000000 > --- a/RHEL6/input/checks/network_ipv6_disable_interfaces.xml > +++ /dev/null > @@ -1,59 +0,0 @@ > - > - - id=3D"network_ipv6_disable_interfaces" version=3D"1"> > - > - Disable Interface Usage of IPv6 Unless Needed > - > - Red Hat Enterprise Linux 6 > - > - Disable ipv6 on interfaces > - > - > - > - > - > - > - > - > - - check_existence=3D"all_exist" comment=3D"Disable NETWORKING_IPV6" > - id=3D"test_network_ipv6_disable_interfaces_networking" version=3D"1"> > - > - > - > - - id=3D"obj_network_ipv6_disable_interfaces_networking" version=3D"1"> > - /etc/sysconfig > - network > - ^NETWORKING_IPV6=3Dno$ > - 1 > - > - > - - check_existence=3D"all_exist" comment=3D"Disable IPV6INIT" > - id=3D"test_network_ipv6_disable_interfaces_ipv6init" version=3D"1"> > - > - > - > - - id=3D"obj_network_ipv6_disable_interfaces_ipv6init" version=3D"1"> > - /etc/sysconfig > - network > - ^IPV6INIT=3Dno$ > - 1 > - > - > - - check_existence=3D"all_exist" comment=3D"Disable IPV6INIT per interfac= e" > - id=3D"test_network_ipv6_disable_interfaces_ipv6init_per_interface" ver= sion=3D"1"> > - > - > - > - - id=3D"obj_network_ipv6_disable_interfaces_ipv6init_per_interface" vers= ion=3D"1"> > - /etc/sysconfig/network-scripts > - ifcfg-.* > - ^IPV6INIT=3Dno$ > - 1 > - > - > diff --git a/RHEL6/input/checks/no_shelllogin_for_systemaccounts.xml b/RH= EL6/input/checks/no_shelllogin_for_systemaccounts.xml > deleted file mode 100644 > index fdca860..0000000 > --- a/RHEL6/input/checks/no_shelllogin_for_systemaccounts.xml > +++ /dev/null > @@ -1,25 +0,0 @@ > - > - > - > - Block Shell and Login Access for Non-Root System Accounts</= title> > - <affected family=3D"unix"> > - <platform>Red Hat Enterprise Linux 6</platform> > - </affected> > - <description>Login access to non-root system accounts should be di= sabled.</description> > - </metadata> > - <criteria> > - <criterion comment=3D"check /etc/passwd for /sbin/nologin on non r= oot system accounts" test_ref=3D"test_accounts_nologin_for_system" /> > - </criteria> > - </definition> > - <unix:password_test check=3D"none satisfy" id=3D"test_accounts_nologin= _for_system" comment=3D"no system user unauthorized shell" version=3D"1"> > - <unix:object object_ref=3D"object_accounts_nologin_for_system" /> > - <unix:state state_ref=3D"state_sys_user_unauth_shell" /> > - </unix:password_test> > - <unix:password_object id=3D"object_accounts_nologin_for_system" versio= n=3D"1"> > - <unix:username operation=3D"not equal">root</unix:username> > - </unix:password_object> > - <unix:password_state id=3D"state_sys_user_unauth_shell" version=3D"1" = operator=3D"AND"> > - <unix:user_id datatype=3D"int" operation=3D"less than">500</unix:use= r_id> > - <unix:login_shell datatype=3D"string" operation=3D"not equal">/sbin/= nologin</unix:login_shell> > - </unix:password_state> > -</def-group> > diff --git a/RHEL6/input/checks/package_cronie-anacron_removed.xml b/RHEL= 6/input/checks/package_cronie-anacron_removed.xml > deleted file mode 100644 > index 2e5b859..0000000 > --- a/RHEL6/input/checks/package_cronie-anacron_removed.xml > +++ /dev/null > @@ -1,25 +0,0 @@ > -<def-group> > - <!-- THIS FILE IS GENERATED by create_package_removed.py. DO NOT EDIT.= --> > - <definition class=3D"compliance" id=3D"package_cronie-anacron_removed" > - version=3D"1"> > - <metadata> > - <title>Package cronie-anacron Removed > - > - Red Hat Enterprise Linux 6 > - > - The RPM package cronie-anacron should be removed. > - > - > - - test_ref=3D"test_package_cronie-anacron_removed" /> > - > - > - - id=3D"test_package_cronie-anacron_removed" version=3D"1" > - comment=3D"package cronie-anacron is removed"> > - > - > - > - cronie-anacron > - > - > diff --git a/RHEL6/input/checks/package_isdn4k-utils_removed.xml b/RHEL6/= input/checks/package_isdn4k-utils_removed.xml > deleted file mode 100644 > index 1170306..0000000 > --- a/RHEL6/input/checks/package_isdn4k-utils_removed.xml > +++ /dev/null > @@ -1,25 +0,0 @@ > - > - > - - version=3D"1"> > - > - Package isdn4k-utils Removed > - > - Red Hat Enterprise Linux 6 > - > - The RPM package isdn4k-utils should be removed. > - > - > - - test_ref=3D"test_package_isdn4k-utils_removed" /> > - > - > - - id=3D"test_package_isdn4k-utils_removed" version=3D"1" > - comment=3D"package isdn4k-utils is removed"> > - > - > - > - isdn4k-utils > - > - > diff --git a/RHEL6/input/checks/package_ntpdate_installed.xml b/RHEL6/inp= ut/checks/package_ntpdate_installed.xml > deleted file mode 100644 > index 6c7d0fc..0000000 > --- a/RHEL6/input/checks/package_ntpdate_installed.xml > +++ /dev/null > @@ -1,25 +0,0 @@ > - > - > - - version=3D"1"> > - > - Package ntpdate Installed > - > - Red Hat Enterprise Linux 6 > - > - The RPM package ntpdate should be installed. > - > - > - - test_ref=3D"test_package_ntpdate_installed" /> > - > - > - - id=3D"test_package_ntpdate_installed" version=3D"1" > - comment=3D"package ntpdate is installed"> > - > - > - > - ntpdate > - > - > diff --git a/RHEL6/input/checks/service_isdn_disabled.xml b/RHEL6/input/c= hecks/service_isdn_disabled.xml > deleted file mode 100644 > index ff01e72..0000000 > --- a/RHEL6/input/checks/service_isdn_disabled.xml > +++ /dev/null > @@ -1,99 +0,0 @@ > - > - > - - version=3D"1"> > - > - Service isdn Disabled > - > - Red Hat Enterprise Linux 6 > - > - The isdn service should be disabled if possible. > - > - > - > - > - > - > - > - > - > - > - > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel0_isdn" > - version=3D"2"> > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel1_isdn" > - version=3D"2"> > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel2_isdn" > - version=3D"2"> > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel3_isdn" > - version=3D"2"> > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel4_isdn" > - version=3D"2"> > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel5_isdn" > - version=3D"2"> > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel6_isdn" > - version=3D"2"> > - > - > - > - > - isdn > - 0 > - > - > - isdn > - 1 > - > - > - isdn > - 2 > - > - > - isdn > - 3 > - > - > - isdn > - 4 > - > - > - isdn > - 5 > - > - > - isdn > - 6 > - > - > - false > - true > - > - > diff --git a/RHEL6/input/checks/service_mcstrans_disabled.xml b/RHEL6/inp= ut/checks/service_mcstrans_disabled.xml > deleted file mode 100644 > index 65a90d2..0000000 > --- a/RHEL6/input/checks/service_mcstrans_disabled.xml > +++ /dev/null > @@ -1,96 +0,0 @@ > - > - > - - version=3D"1"> > - > - Service mcstrans Disabled > - > - Red Hat Enterprise Linux 6 > - > - The mcstrans service should be disabled if possible.<= /description> > - > - > - > - > - > - > - > - > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel0_mcstrans" > - version=3D"2"> > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel1_mcstrans" > - version=3D"2"> > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel2_mcstrans" > - version=3D"2"> > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel3_mcstrans" > - version=3D"2"> > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel4_mcstrans" > - version=3D"2"> > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel5_mcstrans" > - version=3D"2"> > - > - > - > - - comment=3D"Runlevel test" id=3D"test_runlevel6_mcstrans" > - version=3D"2"> > - > - > - > - > - mcstrans > - 0 > - > - > - mcstrans > - 1 > - > - > - mcstrans > - 2 > - > - > - mcstrans > - 3 > - > - > - mcstrans > - 4 > - > - > - mcstrans > - 5 > - > - > - mcstrans > - 6 > - > - > - false > - true > - > - > diff --git a/RHEL6/input/checks/sysconfig_ipv6_autoconf.xml b/RHEL6/input= /checks/sysconfig_ipv6_autoconf.xml > deleted file mode 100644 > index d75bd00..0000000 > --- a/RHEL6/input/checks/sysconfig_ipv6_autoconf.xml > +++ /dev/null > @@ -1,33 +0,0 @@ > - > - - id=3D"sysconfig_ipv6_autoconf" version=3D"1"> > - > - Disable Automatic Configuration > - > - Red Hat Enterprise Linux 6 > - > - Accepting redirects from IPv6 routers should be > - disabled as appropriate for all network interfaces. (and > - dependencies are met) > - > - - operator=3D"OR"> > - - definition_ref=3D"kernel_module_ipv6_option_disabled" /> > - - test_ref=3D"test_43130" /> > - > - > - - check_existence=3D"at_least_one_exists" comment=3D"TODO::INSERT" > - id=3D"test_43130" version=3D"1"> > - > - > - - id=3D"obj_43130" version=3D"1"> > - /etc/sysconfig > - network > - ^IPV6_AUTOCONF=3Dno$ > - 1 > - > - > diff --git a/RHEL6/input/checks/templates/packages_removed.csv b/RHEL6/in= put/checks/templates/packages_removed.csv > index 9f95f6b..7a0f878 100644 > --- a/RHEL6/input/checks/templates/packages_removed.csv > +++ b/RHEL6/input/checks/templates/packages_removed.csv > @@ -4,7 +4,6 @@ autofs > bind > certmonger > cpuspeed > -cronie-anacron > cups > cyrus-sasl > dbus > @@ -14,7 +13,6 @@ dovecot > hal > httpd > iputils > -isdn4k-utils > kexec-tools > libcgroup > mdadm > @@ -35,7 +33,6 @@ samba > sendmail > smartmontools > squid > -sssd > subscription-manager > sysstat > talk > diff --git a/RHEL6/input/checks/templates/services_disabled.csv b/RHEL6/i= nput/checks/templates/services_disabled.csv > index 57f6c71..642dd8c 100644 > --- a/RHEL6/input/checks/templates/services_disabled.csv > +++ b/RHEL6/input/checks/templates/services_disabled.csv > @@ -13,9 +13,7 @@ dhcpd,dhcp > dovecot,dovecot > haldaemon,hal > httpd,httpd > -isdn,isdn4k-utils > kdump,kexec-tools > -mcstrans, > mdmonitor,mdadm > messagebus,dbus > named,bind ACK. --===============8848657068084618245==--