From maura at eclipse.ncsc.mil Thu Aug 20 11:34:11 2015 Content-Type: multipart/mixed; boundary="===============7377995835686910972==" MIME-Version: 1.0 From: Maura Dailey To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH] Renamed OVAL check file to match contents, then updated OVAL reference to point to said file. Date: Mon, 20 May 2013 16:17:07 -0400 Message-ID: <519A84C3.4030304@eclipse.ncsc.mil> In-Reply-To: 1369065176-9826-2-git-send-email-maura@eclipse.ncsc.mil --===============7377995835686910972== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable In one of the recent merges, Jeff deleted this check, but not the prose. = Should I delete the check? - Maura Dailey On 05/20/2013 11:52 AM, Maura Dailey wrote: > Signed-off-by: Maura Dailey > --- > .../checks/ensure_gpgcheck_never_disabled.xml | 26 -------------= ------- > RHEL6/input/checks/yum_gpgcheck_never_disabled.xml | 26 +++++++++++++= +++++++ > RHEL6/input/system/software/updating.xml | 2 +- > 3 files changed, 27 insertions(+), 27 deletions(-) > delete mode 100644 RHEL6/input/checks/ensure_gpgcheck_never_disabled.xml > create mode 100644 RHEL6/input/checks/yum_gpgcheck_never_disabled.xml > > diff --git a/RHEL6/input/checks/ensure_gpgcheck_never_disabled.xml b/RHEL= 6/input/checks/ensure_gpgcheck_never_disabled.xml > deleted file mode 100644 > index c3a0aec..0000000 > --- a/RHEL6/input/checks/ensure_gpgcheck_never_disabled.xml > +++ /dev/null > @@ -1,26 +0,0 @@ > - > - > - > - All Yum Repos Ensure Package Signature Checking > - > - Red Hat Enterprise Linux 6 > - > - To ensure that signature checking is not > - disabled for any repos, ensure that the following line DOES > - NOT appear in any repo configuration files in > - /etc/yum.repos.d or elsewhere > - > - > - > - > - > - > - > - > - > - /etc/yum.repos.d > - .* > - ^\s*gpgcheck\s*=3D\s*0\s*$<= /ind:pattern> > - 1 > - > - > diff --git a/RHEL6/input/checks/yum_gpgcheck_never_disabled.xml b/RHEL6/i= nput/checks/yum_gpgcheck_never_disabled.xml > new file mode 100644 > index 0000000..c3a0aec > --- /dev/null > +++ b/RHEL6/input/checks/yum_gpgcheck_never_disabled.xml > @@ -0,0 +1,26 @@ > + > + > + > + All Yum Repos Ensure Package Signature Checking > + > + Red Hat Enterprise Linux 6 > + > + To ensure that signature checking is not > + disabled for any repos, ensure that the following line DOES > + NOT appear in any repo configuration files in > + /etc/yum.repos.d or elsewhere > + > + > + > + > + > + > + > + > + > + /etc/yum.repos.d > + .* > + ^\s*gpgcheck\s*=3D\s*0\s*$<= /ind:pattern> > + 1 > + > + > diff --git a/RHEL6/input/system/software/updating.xml b/RHEL6/input/syste= m/software/updating.xml > index 9dbf8b8..95f10d9 100644 > --- a/RHEL6/input/system/software/updating.xml > +++ b/RHEL6/input/system/software/updating.xml > @@ -95,7 +95,7 @@ installation ensures the provenance of the software and > protects against malicious tampering. > > > - > + > > > --===============7377995835686910972==--