Leland,
Here is another of the promised followups to your hanging patch submissions. This patch appears to have been partially applied, perhaps by a later patchset from another party, and I wanted to follow up with you to see if there are any hanging ruleid name changes in your queue.
Upon careful examination, in the file RHEL/6/auxilary/stig_overlay.xml, the following ownerids had their ruleids renamed to the values you suggested: - RHEL-06-000032 - RHEL-06-000099 - RHEL-06-000342 - RHEL-06-000343 - RHEL-06-000344 - RHEL-06-000345
The following was not: - RHEL-06-000163
If RHEL-06-000163 should still be updated to read "nonselected" as its ruleid, let me know, and I will create a small patch. Here are the relevant overlay lines for reference:
<overlay owner="disastig" ruleid="configure_auditd_admin_space_left_action" ownerid="RHEL-06-000163" disa="1343" severity="medium"> <title>The audit system must switch the system to single-user mode when available audit storage volume becomes dangerously low.</title> </overlay>
- Maura Dailey
On 11/20/2013 03:10 PM, Steinke, Leland J Sr CTR DISA FSO (US) wrote:
Would it be simpler to remove the associated XCCDF rules from the STIG profile?
I actually removed them for a while, but put them back in. At this point, the "selected" and "not selected" findings are indicated by the presence or absence of the VMS identifiers, respectively.
Ack?
Thanks, Leland -- Leland Steinke, Security+ DISA FSO Technical Support Contractor tapestry technologies, Inc 717-267-5797 (DSN 570) leland.j.steinke.ctr@mail.mil (gov't) lsteinke@tapestrytech.com (com'l)
scap-security-guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide