Leland,

Here is another of the promised followups to your hanging patch submissions. This patch appears to have been partially applied, perhaps by a later patchset from another party, and I wanted to follow up with you to see if there are any hanging ruleid name changes in your queue.

Upon careful examination, in the file RHEL/6/auxilary/stig_overlay.xml, the following ownerids had their ruleids renamed to the values you suggested:
- RHEL-06-000032
- RHEL-06-000099
- RHEL-06-000342
- RHEL-06-000343
- RHEL-06-000344
- RHEL-06-000345

The following was not:
- RHEL-06-000163

If RHEL-06-000163 should still be updated to read "nonselected" as its ruleid, let me know, and I will create a small patch. Here are the relevant overlay lines for reference:

    <overlay owner="disastig" ruleid="configure_auditd_admin_space_left_action" ownerid="RHEL-06-000163" disa="1343" severity="medium">
        <title>The audit system must switch the system to single-user mode when available audit storage volume becomes dangerously low.</title>
    </overlay>

- Maura Dailey

On 11/20/2013 03:10 PM, Steinke, Leland J Sr CTR DISA FSO (US) wrote:
Would it be simpler to remove the associated XCCDF rules from the STIG
profile?
I actually removed them for a while, but put them back in.  At this
point, the "selected" and "not selected" findings are indicated by the
presence or absence of the VMS identifiers, respectively.
Ack?

Thanks,
Leland
--
Leland Steinke, Security+
DISA FSO Technical Support Contractor
tapestry technologies, Inc
717-267-5797 (DSN 570)
leland.j.steinke.ctr@mail.mil (gov't)
lsteinke@tapestrytech.com (com'l)


_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide