From shawn at redhat.com Thu Aug 20 11:37:25 2015 Content-Type: multipart/mixed; boundary="===============2164941543580068125==" MIME-Version: 1.0 From: Shawn Wells To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH 02/21] Add VMS/DPMS mappings in stig_overlay Date: Sun, 27 Jul 2014 23:34:34 -0400 Message-ID: <53D5C4CA.4020000@redhat.com> In-Reply-To: 1406518028-3921-3-git-send-email-shawn@redhat.com --===============2164941543580068125== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 7/27/14, 11:26 PM, Shawn Wells wrote: > From: Leland Steinke > > - Adds various VMS tags to XCCDF rules > > Signed-off-by: Leland Steinke > --- > RHEL/6/input/auxiliary/stig_overlay.xml | 16 ++++++++++++---- > 1 files changed, 12 insertions(+), 4 deletions(-) > > diff --git a/RHEL/6/input/auxiliary/stig_overlay.xml b/RHEL/6/input/auxil= iary/stig_overlay.xml > index d6139ac..8e9845a 100644 > --- a/RHEL/6/input/auxiliary/stig_overlay.xml > +++ b/RHEL/6/input/auxiliary/stig_overlay.xml > @@ -48,20 +48,28 @@ > > A file integrity tool must be installed. > > - > + > + > The system must use a Linux Security Module at boot time.</tit= le> > </overlay> > + <overlay owner=3D"disastig" ruleid=3D"aide_build_database" ownerid=3D"R= HEL-06-000018" disa=3D"1069" severity=3D"low"> > + <VMSinfo VKey=3D"51391" SVKey=3D"65601" VRelease=3D"1" /> > + <title>A file integrity baseline must be created. > + > > > There must be no .rhosts or hosts.equiv files on the system.</= title> > </overlay> > - <overlay owner=3D"disastig" ruleid=3D"selinux_state" ownerid=3D"RHEL-06= -000020" disa=3D"22" severity=3D"medium"> > + <overlay owner=3D"disastig" ruleid=3D"selinux_state" ownerid=3D"RHEL-06= -000020" disa=3D"366" severity=3D"medium"> > + <VMSinfo VKey=3D"51363" SVKey=3D"65573" VRelease=3D"1" /> > <title>The system must use a Linux Security Module configured to enfo= rce limits on system services. > > - > + > + > The system must use a Linux Security Module configured to limi= t the privileges of system services. > > - > + > + > All device files must be monitored by the system Linux Securit= y Module. > > ack --===============2164941543580068125==--