From shawn at redhat.com Thu Aug 20 11:31:09 2015 Content-Type: multipart/mixed; boundary="===============1058740454269569343==" MIME-Version: 1.0 From: Shawn Wells To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH] prose fixups for openswan * moved from common to desktop Profile * providing VPN tunnel availability for mobile devices was original rationale for inclusion in a Profile Date: Mon, 28 May 2012 16:37:20 -0400 Message-ID: <4FC3E200.5060302@redhat.com> In-Reply-To: 1337904150-21235-2-git-send-email-blank@eclipse.ncsc.mil --===============1058740454269569343== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 5/24/12 8:02 PM, Jeffrey Blank wrote: > Signed-off-by: Jeffrey Blank > --- > rhel6/src/input/profiles/common.xml | 1 - > rhel6/src/input/profiles/desktop.xml | 1 + > rhel6/src/input/system/network/ipsec.xml | 21 +++++++++++++++------ > 3 files changed, 16 insertions(+), 7 deletions(-) > > diff --git a/rhel6/src/input/profiles/common.xml b/rhel6/src/input/profil= es/common.xml > index a28794e..80c6d68 100644 > --- a/rhel6/src/input/profiles/common.xml > +++ b/rhel6/src/input/profiles/common.xml > @@ -72,7 +72,6 @@ > > > > > diff --git a/rhel6/src/input/profiles/desktop.xml b/rhel6/src/input/profi= les/desktop.xml > index 1fb20f6..61f84a4 100644 > --- a/rhel6/src/input/profiles/desktop.xml > +++ b/rhel6/src/input/profiles/desktop.xml > @@ -7,6 +7,7 @@ > > > > > > diff --git a/rhel6/src/input/system/network/ipsec.xml b/rhel6/src/input/s= ystem/network/ipsec.xml > index b1004ed..32266a1 100644 > --- a/rhel6/src/input/system/network/ipsec.xml > +++ b/rhel6/src/input/system/network/ipsec.xml > @@ -1,13 +1,22 @@ > > -Install the openswan Package > -Ensure openswan is used for IPSec. > -
yum install openswan
> +IPSec Support > +Support for Internet Protocol Security (IPsec) > +is provided in RHEL 6 with Openswan. > > > > -Install OpenSWAN > -OpenSWAN should be installed. > - > +Install openswan Package > +The Openswan package provides an implementation of IPsec > +and IKE, which permits the creation of secure tunnels over > +untrusted networks. Theopenswan package can be installed > +with the following command: > +
# yum install openswan
> +
> +Providing the ability for remote users or systems > +to initiate a secure VPN connection protects information when it is > +transmitted over a wide area network. > + > + > > >
Ack --===============1058740454269569343==--