From jlieskov at redhat.com Thu Aug 20 11:37:17 2015 Content-Type: multipart/mixed; boundary="===============5367255875118515237==" MIME-Version: 1.0 From: Jan Lieskovsky To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH] Added vsftpd OVAL check and modified packages_installed.csv file Date: Fri, 27 Jun 2014 13:06:24 -0400 Message-ID: <2127243058.46551561.1403888784043.JavaMail.zimbra@redhat.com> In-Reply-To: 1403887034-55372-1-git-send-email-dsmith@secure-innovations.net --===============5367255875118515237== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hello David, ----- Original Message ----- > From: "David Smith" > To: scap-security-guide(a)lists.fedorahosted.org > Sent: Friday, June 27, 2014 6:37:14 PM > Subject: [PATCH] Added vsftpd OVAL check and modified packages_installed.= csv file Just wondering, what's the motivation behind adding this check? If I am n= ot wrong, the package_vsftpd_installed.xml in RHEL/6 is used from shared/oval directo= ry: scap-security-guide]$ file RHEL/6/input/checks/package_vsftpd_installed.x= ml = RHEL/6/input/checks/package_vsftpd_installed.xml: symbolic link to `../../.= ./../shared/oval/package_vsftpd_installed.xml' So the corresponding XCCDF definition should work without issues. If not, t= he problem should be fixed (but the rules which can be shared we would like to keep in= the /shared directory). Thank you && Regards, Jan. -- Jan iankko Lieskovsky / Red Hat Security Technologies Team > = > = > Signed-off-by: David Smith > --- > RHEL/6/input/checks/package_vsftpd_installed.xml | 26 > ++++++++++++++++++++ > .../input/checks/templates/packages_installed.csv | 1 + > 2 files changed, 27 insertions(+), 0 deletions(-) > create mode 100644 RHEL/6/input/checks/package_vsftpd_installed.xml > = > diff --git a/RHEL/6/input/checks/package_vsftpd_installed.xml > b/RHEL/6/input/checks/package_vsftpd_installed.xml > new file mode 100644 > index 0000000..e4153a1 > --- /dev/null > +++ b/RHEL/6/input/checks/package_vsftpd_installed.xml > @@ -0,0 +1,26 @@ > + > + > + + version=3D"1"> > + > + Package vsftpd Installed > + > + Red Hat Enterprise Linux 6 > + > + The RPM package vsftpd should be installed. > + ref_url=3D"test_attestation"/> > + > + > + + test_ref=3D"test_package_vsftpd_installed" /> > + > + > + + id=3D"test_package_vsftpd_installed" version=3D"1" > + comment=3D"package vsftpd is installed"> > + > + > + > + vsftpd > + > + > diff --git a/RHEL/6/input/checks/templates/packages_installed.csv > b/RHEL/6/input/checks/templates/packages_installed.csv > index ef6e737..dc0ae21 100644 > --- a/RHEL/6/input/checks/templates/packages_installed.csv > +++ b/RHEL/6/input/checks/templates/packages_installed.csv > @@ -13,3 +13,4 @@ postfix > psacct > rsyslog > screen > +vsftpd > -- > 1.7.1 > = > -- > SCAP Security Guide mailing list > scap-security-guide(a)lists.fedorahosted.org > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide > https://github.com/OpenSCAP/scap-security-guide/ --===============5367255875118515237==--