>From 6311d55d5dbecac2e8fa10181b94cb4206abd412 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Fri, 28 Sep 2012 00:03:21 -0400 Subject: [PATCH 3/8] Added persistent config test to sysctl-check-macro Historically this macro only checked for runtime config, not persistent configuration via /etc/sysctl.conf --- RHEL6/transforms/shorthand2xccdf.xslt | 9 +++++---- 1 files changed, 5 insertions(+), 4 deletions(-) diff --git a/RHEL6/transforms/shorthand2xccdf.xslt b/RHEL6/transforms/shorthand2xccdf.xslt index 11181c8..77b4587 100644 --- a/RHEL6/transforms/shorthand2xccdf.xslt +++ b/RHEL6/transforms/shorthand2xccdf.xslt @@ -246,12 +246,13 @@ exclude-result-prefixes="xccdf xhtml"> - The status of the kernel parameter can be queried + The runtime status of the kernel parameter can be queried by running the following command: $ sysctl - The output of the command should indicate a value of . - If this value is not the default value, investigate how it could have been adjusted at runtime, and verify - that it is not set improperly in /etc/sysctl.conf. + The output of the command should indicate a value of .
+ To verify persistent configuration of the kernel parameter, + verify that the following line is present in /etc/sysctl.conf: + $ sysctl
-- 1.7.1