From shawn at redhat.com Thu Aug 20 11:32:51 2015 Content-Type: multipart/mixed; boundary="===============8700029214500063040==" MIME-Version: 1.0 From: Shawn Wells To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH 13/13] DISA FSO provided copy editing of RHEL6/input/services/obsolete.xml Date: Fri, 16 Nov 2012 18:16:32 -0500 Message-ID: <50A6C950.60009@redhat.com> In-Reply-To: 20121116225519.GA5814@mail.corp.redhat.com --===============8700029214500063040== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 11/16/12 5:55 PM, Shawn Wells wrote: > > 0013-DISA-FSO-provided-copy-editing-of-RHEL6-input-servic.patch > > > From 9f6a7e0333417c5125addb9a655a54ca976605a1 Mon Sep 17 00:00:00 2001 > From: Shawn Wells > Date: Fri, 16 Nov 2012 07:41:50 -0500 > Subject: [PATCH 13/13] DISA FSO provided copy editing of RHEL6/input/serv= ices/obsolete.xml > DISA FSO provided copy editing of RHEL6/input/services/obsolete.xml > > --- > RHEL6/input/services/obsolete.xml | 20 ++++++++++---------- > 1 files changed, 10 insertions(+), 10 deletions(-) > > diff --git a/RHEL6/input/services/obsolete.xml b/RHEL6/input/services/obs= olete.xml > index 00529d3..96ab924 100644 > --- a/RHEL6/input/services/obsolete.xml > +++ b/RHEL6/input/services/obsolete.xml > @@ -44,7 +44,7 @@ attacks against xinetd itself. > = > > Uninstall xinetd Package > -The xinetd package can be uninstalled with the fol= lowing command: > +The xinetd package can be uninstalled with the fol= lowing command. >
# yum erase xinetd
>
> > @@ -88,7 +88,7 @@ subject to man-in-the-middle attacks. > > Uninstall telnet-server Package > The telnet-server package can be uninstalled with > -the following command: > +the following command. >
# yum erase telnet-server
> > > @@ -113,7 +113,7 @@ model.
> > Uninstall rsh-server Package > The rsh-server package can be uninstalled with > -the following command: > +the following command. >
# yum erase rsh-server
>
> > @@ -191,7 +191,7 @@ stolen by eavesdroppers on the network. > each user's home directory) list remote hosts and users that are truste= d by the > local system when using the rshd daemon. > To remove these files, run the following command to delete them from any > -location: > +location. >
# rm /etc/hosts.equiv
>
$ rm ~/.rhosts
> > @@ -221,7 +221,7 @@ important authentication information. > > Uninstall ypserv Package > The ypserv package can be uninstalled with > -the following command: > +the following command. >
# yum erase ypserv
>
> > @@ -300,20 +300,20 @@ accidental (or intentional) activation of tftp serv= ices. > > Ensure <tt>tftp</tt> Daemon Uses Secure Mode > If running the tftp service is necessary, it shou= ld be configured > -to change its root directory at startup. To do so, ensure that > +to change its root directory at startup. To do so, ensure > /etc/xinetd.d/tftp includes -s as a command line argu= ment, as shown in > -the following example (which is also the default): > +the following example (which is also the default). >
server_args =3D -s /var/lib/tftpboot
>
> Using the -s option causes the TFTP service to only= serve files from the > given directory. Serving files from an intentionally-specified directory > reduces the risk of sharing files which should remain private. > > -Verify that tftp is configured by with the -s op= tion by running the > -following command: > +Verify tftp is configured by with the -s option = by running the > +following command. >
grep "server_args" /etc/xinetd.d/tftp
> The output should indicate the server_args variable is configu= red with the -s > -flag, matching the example below: > +flag, matching the example below. >
 # grep "server_args" /etc/xinetd.d/tftp
>   server_args =3D -s /var/lib/tftpboot
>
> -- 1.7.1 Ack (note these patches were created by FSO, not myself. I only posted = publicly.) --===============8700029214500063040== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGh0bWw+CiAgPGhlYWQ+CiAgICA8bWV0YSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRG LTgiIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSI+CiAgPC9oZWFkPgogIDxib2R5IGJnY29sb3I9 IiNGRkZGRkYiIHRleHQ9IiMwMDAwMDAiPgogICAgPGRpdiBjbGFzcz0ibW96LWNpdGUtcHJlZml4 Ij5PbiAxMS8xNi8xMiA1OjU1IFBNLCBTaGF3biBXZWxscyB3cm90ZTo8YnI+CiAgICA8L2Rpdj4K ICAgIDxibG9ja3F1b3RlIGNpdGU9Im1pZDoyMDEyMTExNjIyNTUxOS5HQTU4MTRAbWFpbC5jb3Jw LnJlZGhhdC5jb20iCiAgICAgIHR5cGU9ImNpdGUiPgogICAgICA8YnI+CiAgICAgIDxmaWVsZHNl dCBjbGFzcz0ibWltZUF0dGFjaG1lbnRIZWFkZXIiPjxsZWdlbmQKICAgICAgICAgIGNsYXNzPSJt aW1lQXR0YWNobWVudEhlYWRlck5hbWUiPjAwMTMtRElTQS1GU08tcHJvdmlkZWQtY29weS1lZGl0 aW5nLW9mLVJIRUw2LWlucHV0LXNlcnZpYy5wYXRjaDwvbGVnZW5kPjwvZmllbGRzZXQ+CiAgICAg IDxicj4KICAgICAgPGRpdiBjbGFzcz0ibW96LXRleHQtcGxhaW4iIHdyYXA9InRydWUiIGdyYXBo aWNhbC1xdW90ZT0idHJ1ZSIKICAgICAgICBzdHlsZT0iZm9udC1mYW1pbHk6IC1tb3otZml4ZWQ7 IGZvbnQtc2l6ZTogMTJweDsiCiAgICAgICAgbGFuZz0ieC13ZXN0ZXJuIj4KICAgICAgICA8cHJl IHdyYXA9IiI+RnJvbSA5ZjZhN2UwMzMzNDE3YzUxMjVhZGRiOWE2NTVhNTRjYTk3NjYwNWExIE1v biBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBTaGF3biBXZWxscyA8YSBtb3otZG8tbm90LXNl bmQ9InRydWUiIGNsYXNzPSJtb3otdHh0LWxpbmstcmZjMjM5NkUiIGhyZWY9Im1haWx0bzpzaGF3 bkByZWRoYXQuY29tIj4mbHQ7c2hhd25AcmVkaGF0LmNvbSZndDs8L2E+CkRhdGU6IEZyaSwgMTYg Tm92IDIwMTIgMDc6NDE6NTAgLTA1MDAKU3ViamVjdDogW1BBVENIIDEzLzEzXSBESVNBIEZTTyBw cm92aWRlZCBjb3B5IGVkaXRpbmcgb2YgUkhFTDYvaW5wdXQvc2VydmljZXMvb2Jzb2xldGUueG1s CiBESVNBIEZTTyBwcm92aWRlZCBjb3B5IGVkaXRpbmcgb2YgUkhFTDYvaW5wdXQvc2VydmljZXMv b2Jzb2xldGUueG1sCgotLS0KIFJIRUw2L2lucHV0L3NlcnZpY2VzL29ic29sZXRlLnhtbCB8ICAg MjAgKysrKysrKysrKy0tLS0tLS0tLS0KIDEgZmlsZXMgY2hhbmdlZCwgMTAgaW5zZXJ0aW9ucygr KSwgMTAgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvUkhFTDYvaW5wdXQvc2VydmljZXMvb2Jz b2xldGUueG1sIGIvUkhFTDYvaW5wdXQvc2VydmljZXMvb2Jzb2xldGUueG1sCmluZGV4IDAwNTI5 ZDMuLjk2YWI5MjQgMTAwNjQ0Ci0tLSBhL1JIRUw2L2lucHV0L3NlcnZpY2VzL29ic29sZXRlLnht bAorKysgYi9SSEVMNi9pbnB1dC9zZXJ2aWNlcy9vYnNvbGV0ZS54bWwKQEAgLTQ0LDcgKzQ0LDcg QEAgYXR0YWNrcyBhZ2FpbnN0IHhpbmV0ZCBpdHNlbGYuCiAKICZsdDtSdWxlIGlkPSJ1bmluc3Rh bGxfeGluZXRkIiZndDsKICZsdDt0aXRsZSZndDtVbmluc3RhbGwgeGluZXRkIFBhY2thZ2UmbHQ7 L3RpdGxlJmd0OwotJmx0O2Rlc2NyaXB0aW9uJmd0O1RoZSAmbHQ7dHQmZ3Q7eGluZXRkJmx0Oy90 dCZndDsgcGFja2FnZSBjYW4gYmUgdW5pbnN0YWxsZWQgd2l0aCB0aGUgZm9sbG93aW5nIGNvbW1h bmQ6CismbHQ7ZGVzY3JpcHRpb24mZ3Q7VGhlICZsdDt0dCZndDt4aW5ldGQmbHQ7L3R0Jmd0OyBw YWNrYWdlIGNhbiBiZSB1bmluc3RhbGxlZCB3aXRoIHRoZSBmb2xsb3dpbmcgY29tbWFuZC4KICZs dDtwcmUmZ3Q7IyB5dW0gZXJhc2UgeGluZXRkJmx0Oy9wcmUmZ3Q7CiAmbHQ7L2Rlc2NyaXB0aW9u Jmd0OwogJmx0O29jaWwmZ3Q7Jmx0O3BhY2thZ2UtY2hlY2stbWFjcm8gcGFja2FnZT0ieGluZXRk IiAvJmd0OyAmbHQ7L29jaWwmZ3Q7CkBAIC04OCw3ICs4OCw3IEBAIHN1YmplY3QgdG8gbWFuLWlu LXRoZS1taWRkbGUgYXR0YWNrcy4KICZsdDtSdWxlIGlkPSJ1bmluc3RhbGxfdGVsbmV0X3NlcnZl ciIgc2V2ZXJpdHk9ImhpZ2giJmd0OwogJmx0O3RpdGxlJmd0O1VuaW5zdGFsbCB0ZWxuZXQtc2Vy dmVyIFBhY2thZ2UmbHQ7L3RpdGxlJmd0OwogJmx0O2Rlc2NyaXB0aW9uJmd0O1RoZSAmbHQ7dHQm Z3Q7dGVsbmV0LXNlcnZlciZsdDsvdHQmZ3Q7IHBhY2thZ2UgY2FuIGJlIHVuaW5zdGFsbGVkIHdp dGgKLXRoZSBmb2xsb3dpbmcgY29tbWFuZDoKK3RoZSBmb2xsb3dpbmcgY29tbWFuZC4KICZsdDtw cmUmZ3Q7IyB5dW0gZXJhc2UgdGVsbmV0LXNlcnZlciZsdDsvcHJlJmd0OyZsdDsvZGVzY3JpcHRp b24mZ3Q7CiAmbHQ7b2NpbCZndDsmbHQ7cGFja2FnZS1jaGVjay1tYWNybyBwYWNrYWdlPSJ0ZWxu ZXQtc2VydmVyIiAvJmd0OyAmbHQ7L29jaWwmZ3Q7CiAmbHQ7cmF0aW9uYWxlJmd0OwpAQCAtMTEz LDcgKzExMyw3IEBAIG1vZGVsLiZsdDsvZGVzY3JpcHRpb24mZ3Q7CiAmbHQ7UnVsZSBpZD0idW5p bnN0YWxsX3JzaC1zZXJ2ZXIiIHNldmVyaXR5PSJoaWdoIiZndDsKICZsdDt0aXRsZSZndDtVbmlu c3RhbGwgcnNoLXNlcnZlciBQYWNrYWdlJmx0Oy90aXRsZSZndDsKICZsdDtkZXNjcmlwdGlvbiZn dDtUaGUgJmx0O3R0Jmd0O3JzaC1zZXJ2ZXImbHQ7L3R0Jmd0OyBwYWNrYWdlIGNhbiBiZSB1bmlu c3RhbGxlZCB3aXRoCi10aGUgZm9sbG93aW5nIGNvbW1hbmQ6Cit0aGUgZm9sbG93aW5nIGNvbW1h bmQuCiAmbHQ7cHJlJmd0OyMgeXVtIGVyYXNlIHJzaC1zZXJ2ZXImbHQ7L3ByZSZndDsKICZsdDsv ZGVzY3JpcHRpb24mZ3Q7CiAmbHQ7b2NpbCZndDsmbHQ7cGFja2FnZS1jaGVjay1tYWNybyBwYWNr YWdlPSJyc2gtc2VydmVyIiAvJmd0OyAmbHQ7L29jaWwmZ3Q7CkBAIC0xOTEsNyArMTkxLDcgQEAg c3RvbGVuIGJ5IGVhdmVzZHJvcHBlcnMgb24gdGhlIG5ldHdvcmsuCiBlYWNoIHVzZXIncyBob21l IGRpcmVjdG9yeSkgbGlzdCByZW1vdGUgaG9zdHMgYW5kIHVzZXJzIHRoYXQgYXJlIHRydXN0ZWQg YnkgdGhlCiBsb2NhbCBzeXN0ZW0gd2hlbiB1c2luZyB0aGUgcnNoZCBkYWVtb24uCiBUbyByZW1v dmUgdGhlc2UgZmlsZXMsIHJ1biB0aGUgZm9sbG93aW5nIGNvbW1hbmQgdG8gZGVsZXRlIHRoZW0g ZnJvbSBhbnkKLWxvY2F0aW9uOgorbG9jYXRpb24uCiAmbHQ7cHJlJmd0OyMgcm0gL2V0Yy9ob3N0 cy5lcXVpdiZsdDsvcHJlJmd0OwogJmx0O3ByZSZndDskIHJtIH4vLnJob3N0cyZsdDsvcHJlJmd0 OwogJmx0Oy9kZXNjcmlwdGlvbiZndDsKQEAgLTIyMSw3ICsyMjEsNyBAQCBpbXBvcnRhbnQgYXV0 aGVudGljYXRpb24gaW5mb3JtYXRpb24uJmx0Oy9kZXNjcmlwdGlvbiZndDsKICZsdDtSdWxlIGlk PSJ1bmluc3RhbGxfeXBzZXJ2IiBzZXZlcml0eT0ibWVkaXVtIiZndDsKICZsdDt0aXRsZSZndDtV bmluc3RhbGwgeXBzZXJ2IFBhY2thZ2UmbHQ7L3RpdGxlJmd0OwogJmx0O2Rlc2NyaXB0aW9uJmd0 O1RoZSAmbHQ7dHQmZ3Q7eXBzZXJ2Jmx0Oy90dCZndDsgcGFja2FnZSBjYW4gYmUgdW5pbnN0YWxs ZWQgd2l0aAotdGhlIGZvbGxvd2luZyBjb21tYW5kOgordGhlIGZvbGxvd2luZyBjb21tYW5kLgog Jmx0O3ByZSZndDsjIHl1bSBlcmFzZSB5cHNlcnYmbHQ7L3ByZSZndDsKICZsdDsvZGVzY3JpcHRp b24mZ3Q7CiAmbHQ7b2NpbCZndDsmbHQ7cGFja2FnZS1jaGVjay1tYWNybyBwYWNrYWdlPSJ5cHNl cnYiIC8mZ3Q7ICZsdDsvb2NpbCZndDsKQEAgLTMwMCwyMCArMzAwLDIwIEBAIGFjY2lkZW50YWwg KG9yIGludGVudGlvbmFsKSBhY3RpdmF0aW9uIG9mIHRmdHAgc2VydmljZXMuCiAmbHQ7UnVsZSBp ZD0idGZ0cGRfdXNlc19zZWN1cmVfbW9kZSIgc2V2ZXJpdHk9ImhpZ2giJmd0OwogJmx0O3RpdGxl Jmd0O0Vuc3VyZSAmbHQ7dHQmZ3Q7dGZ0cCZsdDsvdHQmZ3Q7IERhZW1vbiBVc2VzIFNlY3VyZSBN b2RlJmx0Oy90aXRsZSZndDsKICZsdDtkZXNjcmlwdGlvbiZndDtJZiBydW5uaW5nIHRoZSAmbHQ7 dHQmZ3Q7dGZ0cCZsdDsvdHQmZ3Q7IHNlcnZpY2UgaXMgbmVjZXNzYXJ5LCBpdCBzaG91bGQgYmUg Y29uZmlndXJlZAotdG8gY2hhbmdlIGl0cyByb290IGRpcmVjdG9yeSBhdCBzdGFydHVwLiBUbyBk byBzbywgZW5zdXJlIHRoYXQKK3RvIGNoYW5nZSBpdHMgcm9vdCBkaXJlY3RvcnkgYXQgc3RhcnR1 cC4gVG8gZG8gc28sIGVuc3VyZQogJmx0O3R0Jmd0Oy9ldGMveGluZXRkLmQvdGZ0cCZsdDsvdHQm Z3Q7IGluY2x1ZGVzICZsdDt0dCZndDstcyZsdDsvdHQmZ3Q7IGFzIGEgY29tbWFuZCBsaW5lIGFy Z3VtZW50LCBhcyBzaG93biBpbgotdGhlIGZvbGxvd2luZyBleGFtcGxlICh3aGljaCBpcyBhbHNv IHRoZSBkZWZhdWx0KToKK3RoZSBmb2xsb3dpbmcgZXhhbXBsZSAod2hpY2ggaXMgYWxzbyB0aGUg ZGVmYXVsdCkuCiAmbHQ7cHJlJmd0O3NlcnZlcl9hcmdzID0gLXMgL3Zhci9saWIvdGZ0cGJvb3Qm bHQ7L3ByZSZndDsKICZsdDsvZGVzY3JpcHRpb24mZ3Q7CiAmbHQ7cmF0aW9uYWxlJmd0O1VzaW5n IHRoZSAmbHQ7dHQmZ3Q7LXMmbHQ7L3R0Jmd0OyBvcHRpb24gY2F1c2VzIHRoZSBURlRQIHNlcnZp Y2UgdG8gb25seSBzZXJ2ZSBmaWxlcyBmcm9tIHRoZQogZ2l2ZW4gZGlyZWN0b3J5LiBTZXJ2aW5n IGZpbGVzIGZyb20gYW4gaW50ZW50aW9uYWxseS1zcGVjaWZpZWQgZGlyZWN0b3J5CiByZWR1Y2Vz IHRoZSByaXNrIG9mIHNoYXJpbmcgZmlsZXMgd2hpY2ggc2hvdWxkIHJlbWFpbiBwcml2YXRlLgog Jmx0Oy9yYXRpb25hbGUmZ3Q7Ci0mbHQ7b2NpbCZndDtWZXJpZnkgdGhhdCAmbHQ7dHQmZ3Q7dGZ0 cCZsdDsvdHQmZ3Q7IGlzIGNvbmZpZ3VyZWQgYnkgd2l0aCB0aGUgJmx0O3R0Jmd0Oy1zJmx0Oy90 dCZndDsgb3B0aW9uIGJ5IHJ1bm5pbmcgdGhlCi1mb2xsb3dpbmcgY29tbWFuZDoKKyZsdDtvY2ls Jmd0O1ZlcmlmeSAmbHQ7dHQmZ3Q7dGZ0cCZsdDsvdHQmZ3Q7IGlzIGNvbmZpZ3VyZWQgYnkgd2l0 aCB0aGUgJmx0O3R0Jmd0Oy1zJmx0Oy90dCZndDsgb3B0aW9uIGJ5IHJ1bm5pbmcgdGhlCitmb2xs b3dpbmcgY29tbWFuZC4KICZsdDtwcmUmZ3Q7Z3JlcCAic2VydmVyX2FyZ3MiIC9ldGMveGluZXRk LmQvdGZ0cCZsdDsvcHJlJmd0OwogVGhlIG91dHB1dCBzaG91bGQgaW5kaWNhdGUgdGhlICZsdDt0 dCZndDtzZXJ2ZXJfYXJncyZsdDsvdHQmZ3Q7IHZhcmlhYmxlIGlzIGNvbmZpZ3VyZWQgd2l0aCB0 aGUgJmx0O3R0Jmd0Oy1zJmx0Oy90dCZndDsKLWZsYWcsIG1hdGNoaW5nIHRoZSBleGFtcGxlIGJl bG93OgorZmxhZywgbWF0Y2hpbmcgdGhlIGV4YW1wbGUgYmVsb3cuCiAmbHQ7cHJlJmd0OyAjIGdy ZXAgInNlcnZlcl9hcmdzIiAvZXRjL3hpbmV0ZC5kL3RmdHAKIHNlcnZlcl9hcmdzID0gLXMgL3Zh ci9saWIvdGZ0cGJvb3QmbHQ7L3ByZSZndDsKICZsdDsvb2NpbCZndDsKPGRpdiBjbGFzcz0ibW96 LXR4dC1zaWciPi0tIAoxLjcuMQoKPC9kaXY+PC9wcmU+CiAgICAgIDwvZGl2PgogICAgPC9ibG9j a3F1b3RlPgogICAgPGJyPgogICAgQWNrPGJyPgogICAgPGJyPgogICAgKG5vdGUgdGhlc2UgcGF0 Y2hlcyB3ZXJlIGNyZWF0ZWQgYnkgRlNPLCBub3QgbXlzZWxmLiBJIG9ubHkgcG9zdGVkCiAgICBw dWJsaWNseS4pCiAgPC9ib2R5Pgo8L2h0bWw+Cg== --===============8700029214500063040==--