From michael at redhat.com Thu Aug 20 11:32:21 2015 Content-Type: multipart/mixed; boundary="===============2196325980130301645==" MIME-Version: 1.0 From: Michael J. McConachie To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH 1/6] Test Tags for input/system/software/updating.xml Date: Sun, 30 Sep 2012 22:10:04 -0400 Message-ID: <5068FB7C.8010500@redhat.com> In-Reply-To: 5068805F.4070404@redhat.com --===============2196325980130301645== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Will be glad to do whatever is deemed desired; (that was there before I took the reins on it and I wondered the same thing myself) As you noted, I added the /etc/yum.repos.d info for obvious reasons. We might wanna let the original author comment, so we can get a feel for what/why/how. Otherwise, I'll make the change if we don't meet resistance. Keep in mind, I don't own most of this; my efforts have been in the tagging, and generation of **some** of the ocil check text. Nothing more. Thanks, MM On 09/30/2012 01:24 PM, Shawn Wells wrote: > On 9/30/12 12:33 AM, Michael J. McConachie wrote: >> >> 0001-Test-Tags-for-input-system-software-updating.xml.patch >> >> >> From ebc068bd50d3761e36ad66649e53c3dc48b29d8e Mon Sep 17 00:00:00 2001 >> From: Michael McConachie >> Date: Fri, 28 Sep 2012 22:50:52 -0400 >> Subject: [PATCH 1/6] Test Tags for input/system/software/updating.xml >> >> --- >> RHEL6/input/system/software/updating.xml | 4 ++-- >> 1 file changed, 2 insertions(+), 2 deletions(-) >> >> diff --git a/RHEL6/input/system/software/updating.xml b/RHEL6/input/syst= em/software/updating.xml >> index ac9e590..1cbaae2 100644 >> --- a/RHEL6/input/system/software/updating.xml >> +++ b/RHEL6/input/system/software/updating.xml >> @@ -56,8 +56,8 @@ the [main] section: >> >> >> To determine whether yum is configured to use gpgcheck, >> -inspect /etc/yum.conf and ensure that the following appears in= the >> -[main] section: >> +inspect /etc/yum.conf and /etc/yum.repos.d/(reponame).repo= >> +to ensure that the following appears in the [main] section: >>
gpgcheck=3D1
>> A value of 1 indicates that gpgcheck is enabled. Abse= nce of a >> gpgcheck line or a setting of 0 indicates that it is >> -- 1.7.11.4 > Ack to the validity of checking both /etc/yum.conf and /etc/yum.repos.d/* > > In review, is there a reason why we should have both of the following > rules? > " Ensure gpgcheck Enabled In Main Yum Configuration" and > " Ensure gpgcheck Enabled For All Yum Package Repositories" > > Seems to make sense to combine the two into a single rule, likely > using the , and from " Ensure gpgcheck > Enabled In Main Yum Configuration" but the from " Ensure > gpgcheck Enabled For All Yum Package Repositories" > > Mike, could you knock that out? (unless you or someone else see > validity in having a "check all repos" and then another rule checking > a specific one. Seems redundant. > > > > _______________________________________________ > scap-security-guide mailing list > scap-security-guide(a)lists.fedorahosted.org > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide --===============2196325980130301645== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGh0bWw+CiAgPGhlYWQ+CiAgICA8bWV0YSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRG LTgiIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSI+CiAgPC9oZWFkPgogIDxib2R5IGJnY29sb3I9 IiNGRkZGRkYiIHRleHQ9IiMwMDAwMDAiPgogICAgV2lsbCBiZSBnbGFkIHRvIGRvIHdoYXRldmVy IGlzIGRlZW1lZCBkZXNpcmVkOyAodGhhdCB3YXMgdGhlcmUKICAgIGJlZm9yZSBJIHRvb2sgdGhl IHJlaW5zIG9uIGl0IGFuZCBJIHdvbmRlcmVkIHRoZSBzYW1lIHRoaW5nIG15c2VsZik8YnI+CiAg ICA8YnI+CiAgICBBcyB5b3Ugbm90ZWQsIEkgYWRkZWQgdGhlIC9ldGMveXVtLnJlcG9zLmQgaW5m byBmb3Igb2J2aW91cwogICAgcmVhc29ucy7CoCBXZSBtaWdodCB3YW5uYSBsZXQgdGhlIG9yaWdp bmFsIGF1dGhvciBjb21tZW50LCBzbyB3ZSBjYW4KICAgIGdldCBhIGZlZWwgZm9yIHdoYXQvd2h5 L2hvdy7CoCBPdGhlcndpc2UsIEknbGwgbWFrZSB0aGUgY2hhbmdlIGlmIHdlCiAgICBkb24ndCBt ZWV0IHJlc2lzdGFuY2UuPGJyPgogICAgPGJyPgogICAgS2VlcCBpbiBtaW5kLCBJIGRvbid0IG93 biBtb3N0IG9mIHRoaXM7IG15IGVmZm9ydHMgaGF2ZSBiZWVuIGluIHRoZQogICAgdGFnZ2luZywg YW5kIGdlbmVyYXRpb24gb2YgKipzb21lKiogb2YgdGhlIG9jaWwgY2hlY2sgdGV4dC7CoCBOb3Ro aW5nCiAgICBtb3JlLjxicj4KICAgIDxicj4KICAgIFRoYW5rcyw8YnI+CiAgICA8YnI+CiAgICBN TTxicj4KICAgIDxicj4KICAgIDxicj4KICAgIDxkaXYgY2xhc3M9Im1vei1jaXRlLXByZWZpeCI+ T24gMDkvMzAvMjAxMiAwMToyNCBQTSwgU2hhd24gV2VsbHMKICAgICAgd3JvdGU6PGJyPgogICAg PC9kaXY+CiAgICA8YmxvY2txdW90ZSBjaXRlPSJtaWQ6NTA2ODgwNUYuNDA3MDQwNEByZWRoYXQu Y29tIiB0eXBlPSJjaXRlIj4KICAgICAgPG1ldGEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0 PVVURi04IiBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiPgogICAgICA8ZGl2IGNsYXNzPSJtb3ot Y2l0ZS1wcmVmaXgiPk9uIDkvMzAvMTIgMTI6MzMgQU0sIE1pY2hhZWwgSi4KICAgICAgICBNY0Nv bmFjaGllIHdyb3RlOjxicj4KICAgICAgPC9kaXY+CiAgICAgIDxibG9ja3F1b3RlCiAgICAgICAg Y2l0ZT0ibWlkOjIwMTIwOTMwMDQzMzAxLkdBNTUxNEBtb2JpbGUuZHVkZS5sb2NhbGRvbWFpbiIK ICAgICAgICB0eXBlPSJjaXRlIj48YnI+CiAgICAgICAgPGZpZWxkc2V0IGNsYXNzPSJtaW1lQXR0 YWNobWVudEhlYWRlciI+PGxlZ2VuZAogICAgICAgICAgICBjbGFzcz0ibWltZUF0dGFjaG1lbnRI ZWFkZXJOYW1lIj4wMDAxLVRlc3QtVGFncy1mb3ItaW5wdXQtc3lzdGVtLXNvZnR3YXJlLXVwZGF0 aW5nLnhtbC5wYXRjaDwvbGVnZW5kPjwvZmllbGRzZXQ+CiAgICAgICAgPGJyPgogICAgICAgIDxk aXYgY2xhc3M9Im1vei10ZXh0LXBsYWluIiB3cmFwPSJ0cnVlIiBncmFwaGljYWwtcXVvdGU9InRy dWUiCiAgICAgICAgICBzdHlsZT0iZm9udC1mYW1pbHk6IC1tb3otZml4ZWQ7IGZvbnQtc2l6ZTog MTJweDsiCiAgICAgICAgICBsYW5nPSJ4LXdlc3Rlcm4iPgogICAgICAgICAgPHByZSB3cmFwPSIi PkZyb20gZWJjMDY4YmQ1MGQzNzYxZTM2YWQ2NjY0OWU1M2MzZGM0OGIyOWQ4ZSBNb24gU2VwIDE3 IDAwOjAwOjAwIDIwMDEKRnJvbTogTWljaGFlbCBNY0NvbmFjaGllIDxhIG1vei1kby1ub3Qtc2Vu ZD0idHJ1ZSIgY2xhc3M9Im1vei10eHQtbGluay1yZmMyMzk2RSIgaHJlZj0ibWFpbHRvOm1pY2hh ZWxAcmVkaGF0LmNvbSI+Jmx0O21pY2hhZWxAcmVkaGF0LmNvbSZndDs8L2E+CkRhdGU6IEZyaSwg MjggU2VwIDIwMTIgMjI6NTA6NTIgLTA0MDAKU3ViamVjdDogW1BBVENIIDEvNl0gVGVzdCBUYWdz IGZvciBpbnB1dC9zeXN0ZW0vc29mdHdhcmUvdXBkYXRpbmcueG1sCgotLS0KIFJIRUw2L2lucHV0 L3N5c3RlbS9zb2Z0d2FyZS91cGRhdGluZy54bWwgfCA0ICsrLS0KIDEgZmlsZSBjaGFuZ2VkLCAy IGluc2VydGlvbnMoKyksIDIgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvUkhFTDYvaW5wdXQv c3lzdGVtL3NvZnR3YXJlL3VwZGF0aW5nLnhtbCBiL1JIRUw2L2lucHV0L3N5c3RlbS9zb2Z0d2Fy ZS91cGRhdGluZy54bWwKaW5kZXggYWM5ZTU5MC4uMWNiYWFlMiAxMDA2NDQKLS0tIGEvUkhFTDYv aW5wdXQvc3lzdGVtL3NvZnR3YXJlL3VwZGF0aW5nLnhtbAorKysgYi9SSEVMNi9pbnB1dC9zeXN0 ZW0vc29mdHdhcmUvdXBkYXRpbmcueG1sCkBAIC01Niw4ICs1Niw4IEBAIHRoZSAmbHQ7dHQmZ3Q7 W21haW5dJmx0Oy90dCZndDsgc2VjdGlvbjoKICZsdDsvZGVzY3JpcHRpb24mZ3Q7CiAmbHQ7b2Np bCBjbGF1c2U9IkdQRyBjaGVja2luZyBpc24ndCBlbmFibGVkIiZndDsKIFRvIGRldGVybWluZSB3 aGV0aGVyICZsdDt0dCZndDt5dW0mbHQ7L3R0Jmd0OyBpcyBjb25maWd1cmVkIHRvIHVzZSAmbHQ7 dHQmZ3Q7Z3BnY2hlY2smbHQ7L3R0Jmd0OywKLWluc3BlY3QgJmx0O3R0Jmd0Oy9ldGMveXVtLmNv bmYmbHQ7L3R0Jmd0OyBhbmQgZW5zdXJlIHRoYXQgdGhlIGZvbGxvd2luZyBhcHBlYXJzIGluIHRo ZQotJmx0O3R0Jmd0O1ttYWluXSZsdDsvdHQmZ3Q7IHNlY3Rpb246CitpbnNwZWN0ICZsdDt0dCZn dDs8aSBjbGFzcz0ibW96LXR4dC1zbGFzaCI+PHNwYW4gY2xhc3M9Im1vei10eHQtdGFnIj4vPC9z cGFuPmV0Yy95dW0uY29uZiZsdDsvdHQmZ3Q7IGFuZCAmbHQ7dHQmZ3Q7L2V0Yy95dW0ucmVwb3Mu ZDxzcGFuIGNsYXNzPSJtb3otdHh0LXRhZyI+Lzwvc3Bhbj48L2k+KHJlcG9uYW1lKS5yZXBvJmx0 Oy90dCZndDsKK3RvIGVuc3VyZSB0aGF0IHRoZSBmb2xsb3dpbmcgYXBwZWFycyBpbiB0aGUgJmx0 O3R0Jmd0O1ttYWluXSZsdDsvdHQmZ3Q7IHNlY3Rpb246CiAmbHQ7cHJlJmd0O2dwZ2NoZWNrPTEm bHQ7L3ByZSZndDsKIEEgdmFsdWUgb2YgJmx0O3R0Jmd0OzEmbHQ7L3R0Jmd0OyBpbmRpY2F0ZXMg dGhhdCAmbHQ7dHQmZ3Q7Z3BnY2hlY2smbHQ7L3R0Jmd0OyBpcyBlbmFibGVkLiBBYnNlbmNlIG9m IGEKICZsdDt0dCZndDtncGdjaGVjayZsdDsvdHQmZ3Q7IGxpbmUgb3IgYSBzZXR0aW5nIG9mICZs dDt0dCZndDswJmx0Oy90dCZndDsgaW5kaWNhdGVzIHRoYXQgaXQgaXMKPGRpdiBjbGFzcz0ibW96 LXR4dC1zaWciPi0tIAoxLjcuMTEuNAoKPC9kaXY+PC9wcmU+CiAgICAgICAgPC9kaXY+CiAgICAg IDwvYmxvY2txdW90ZT4KICAgICAgQWNrIHRvIHRoZSB2YWxpZGl0eSBvZiBjaGVja2luZyBib3Ro IC9ldGMveXVtLmNvbmYgYW5kCiAgICAgIC9ldGMveXVtLnJlcG9zLmQvKjxicj4KICAgICAgPGJy PgogICAgICBJbiByZXZpZXcsIGlzIHRoZXJlIGEgcmVhc29uIHdoeSB3ZSBzaG91bGQgaGF2ZSBi b3RoIG9mIHRoZQogICAgICBmb2xsb3dpbmcgcnVsZXM/PGJyPgogICAgICAiCiAgICAgIDxtZXRh IGNoYXJzZXQ9InV0Zi04Ij4KICAgICAgPG1ldGEgY2hhcnNldD0idXRmLTgiPgogICAgICA8c3Bh biBzdHlsZT0iY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IFRpbWVzOyBmb250LXNp emU6CiAgICAgICAgbWVkaXVtOyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9y bWFsOyBmb250LXdlaWdodDoKICAgICAgICBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IGxpbmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhhbnM6IDI7CiAgICAgICAgdGV4dC1hbGlnbjogc3Rh cnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOwogICAgICAgIHdoaXRl LXNwYWNlOiBub3JtYWw7IHdpZG93czogMjsgd29yZC1zcGFjaW5nOiAwcHg7CiAgICAgICAgLXdl YmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7CiAgICAgICAgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IGZsb2F0OiBub25lOyAiPkVu c3VyZSBncGdjaGVjawogICAgICAgIEVuYWJsZWQgSW4gTWFpbiBZdW0gQ29uZmlndXJhdGlvbjwv c3Bhbj4iIGFuZDxicj4KICAgICAgIgogICAgICA8bWV0YSBjaGFyc2V0PSJ1dGYtOCI+CiAgICAg IDxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogVGltZXM7IGZv bnQtc2l6ZToKICAgICAgICBtZWRpdW07IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 OiBub3JtYWw7IGZvbnQtd2VpZ2h0OgogICAgICAgIG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogMjsKICAgICAgICB0ZXh0LWFsaWdu OiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7CiAgICAgICAg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiAyOyB3b3JkLXNwYWNpbmc6IDBweDsKICAgICAg ICAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsKICAgICAgICBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsgZmxvYXQ6IG5vbmU7 ICI+RW5zdXJlIGdwZ2NoZWNrCiAgICAgICAgRW5hYmxlZCBGb3IgQWxsIFl1bSBQYWNrYWdlIFJl cG9zaXRvcmllczwvc3Bhbj4iPGJyPgogICAgICA8YnI+CiAgICAgIFNlZW1zIHRvIG1ha2Ugc2Vu c2UgdG8gY29tYmluZSB0aGUgdHdvIGludG8gYSBzaW5nbGUgcnVsZSwgbGlrZWx5CiAgICAgIHVz aW5nIHRoZSAmbHQ7ZGVzY3JpcHRpb24mZ3Q7LCAmbHQ7b2NpbCZndDsgYW5kICZsdDtyYXRpb25h bGUmZ3Q7CiAgICAgIGZyb20gIgogICAgICA8bWV0YSBjaGFyc2V0PSJ1dGYtOCI+CiAgICAgIDxz cGFuIHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogVGltZXM7IGZvbnQt c2l6ZToKICAgICAgICBtZWRpdW07IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBu b3JtYWw7IGZvbnQtd2VpZ2h0OgogICAgICAgIG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogMjsKICAgICAgICB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7CiAgICAgICAgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiAyOyB3b3JkLXNwYWNpbmc6IDBweDsKICAgICAgICAt d2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsKICAgICAgICBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsgZmxvYXQ6IG5vbmU7ICI+ RW5zdXJlIGdwZ2NoZWNrCiAgICAgICAgRW5hYmxlZCBJbiBNYWluIFl1bSBDb25maWd1cmF0aW9u PC9zcGFuPiIgYnV0IHRoZSAmbHQ7dGl0bGUmZ3Q7CiAgICAgIGZyb20gIgogICAgICA8bWV0YSBj aGFyc2V0PSJ1dGYtOCI+CiAgICAgIDxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyBm b250LWZhbWlseTogVGltZXM7IGZvbnQtc2l6ZToKICAgICAgICBtZWRpdW07IGZvbnQtc3R5bGU6 IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZvbnQtd2VpZ2h0OgogICAgICAgIG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczog MjsKICAgICAgICB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7CiAgICAgICAgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiAyOyB3b3Jk LXNwYWNpbmc6IDBweDsKICAgICAgICAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsKICAgICAgICBkaXNwbGF5OiBpbmxpbmUgIWlt cG9ydGFudDsgZmxvYXQ6IG5vbmU7ICI+RW5zdXJlIGdwZ2NoZWNrCiAgICAgICAgRW5hYmxlZCBG b3IgQWxsIFl1bSBQYWNrYWdlIFJlcG9zaXRvcmllczwvc3Bhbj4iPGJyPgogICAgICA8YnI+CiAg ICAgIE1pa2UsIGNvdWxkIHlvdSBrbm9jayB0aGF0IG91dD8gKHVubGVzcyB5b3Ugb3Igc29tZW9u ZSBlbHNlIHNlZQogICAgICB2YWxpZGl0eSBpbiBoYXZpbmcgYSAiY2hlY2sgYWxsIHJlcG9zIiBh bmQgdGhlbiBhbm90aGVyIHJ1bGUKICAgICAgY2hlY2tpbmcgYSBzcGVjaWZpYyBvbmUuIFNlZW1z IHJlZHVuZGFudC4gPGJyPgogICAgICA8YnI+CiAgICAgIDxicj4KICAgICAgPGZpZWxkc2V0IGNs YXNzPSJtaW1lQXR0YWNobWVudEhlYWRlciI+PC9maWVsZHNldD4KICAgICAgPGJyPgogICAgICA8 cHJlIHdyYXA9IiI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18Kc2NhcC1zZWN1cml0eS1ndWlkZSBtYWlsaW5nIGxpc3QKPGEgY2xhc3M9Im1vei10eHQtbGlu ay1hYmJyZXZpYXRlZCIgaHJlZj0ibWFpbHRvOnNjYXAtc2VjdXJpdHktZ3VpZGVAbGlzdHMuZmVk b3JhaG9zdGVkLm9yZyI+c2NhcC1zZWN1cml0eS1ndWlkZUBsaXN0cy5mZWRvcmFob3N0ZWQub3Jn PC9hPgo8YSBjbGFzcz0ibW96LXR4dC1saW5rLWZyZWV0ZXh0IiBocmVmPSJodHRwczovL2xpc3Rz LmZlZG9yYWhvc3RlZC5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2FwLXNlY3VyaXR5LWd1aWRlIj5o dHRwczovL2xpc3RzLmZlZG9yYWhvc3RlZC5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2FwLXNlY3Vy aXR5LWd1aWRlPC9hPgo8L3ByZT4KICAgIDwvYmxvY2txdW90ZT4KICAgIDxicj4KICA8L2JvZHk+ CjwvaHRtbD4K --===============2196325980130301645==--