Signed-off-by: Jeffrey Blank <blank(a)eclipse.ncsc.mil>
---
RHEL6/input/profiles/fisma-medium-rhel6-server.xml | 2 --
RHEL6/input/profiles/manual_audits.xml | 1 -
RHEL6/input/profiles/manual_remediation.xml | 1 -
RHEL6/input/profiles/nist-CL-IL-AL.xml | 5 -----
4 files changed, 0 insertions(+), 9 deletions(-)
diff --git a/RHEL6/input/profiles/fisma-medium-rhel6-server.xml
b/RHEL6/input/profiles/fisma-medium-rhel6-server.xml
index b192061..df9ba7e 100644
--- a/RHEL6/input/profiles/fisma-medium-rhel6-server.xml
+++ b/RHEL6/input/profiles/fisma-medium-rhel6-server.xml
@@ -261,7 +261,6 @@
<select idref="set_ip6tables_default_rule" selected="true" />
<select idref="set_iptables_default_rule" selected="true" />
<select idref="set_iptables_default_rule_forward" selected="true"
/>
-<select idref="iptables_icmp_disabled" selected="true" />
<select idref="disable_protocol_dccp" selected="true" />
<select idref="disable_protocol_sctp" selected="true" />
<select idref="disable_protocol_rds" selected="true" />
@@ -273,7 +272,6 @@
<select idref="network_ipv6_disable_rpc" selected="true" />
<select idref="set_sysctl_net_ipv6_conf_default_accept_ra"
selected="true" />
<select idref="set_sysctl_ipv6_default_accept_redirects"
selected="true" />
-<select idref="network_ipv6_limit_requests" selected="true" />
<!-- IA-2(1) -->
<select idref="bootloader_password" selected="true" />
diff --git a/RHEL6/input/profiles/manual_audits.xml
b/RHEL6/input/profiles/manual_audits.xml
index 005bcd9..e32dd23 100644
--- a/RHEL6/input/profiles/manual_audits.xml
+++ b/RHEL6/input/profiles/manual_audits.xml
@@ -21,7 +21,6 @@
<select idref="aide_build_database" selected="true"/>
<select idref="wireless_disable_in_bios" selected="true"/>
<select idref="deactivate_wireless_interfaces"
selected="true"/>
-<select idref="iptables_log_and_drop_suspicious"
selected="true"/>
<select idref="network_ipv6_default_gateway" selected="true"/>
<select idref="no_files_unowned_by_user" selected="true"/>
<select idref="no_files_unowned_by_group" selected="true"/>
diff --git a/RHEL6/input/profiles/manual_remediation.xml
b/RHEL6/input/profiles/manual_remediation.xml
index b831fa7..6ac1df2 100644
--- a/RHEL6/input/profiles/manual_remediation.xml
+++ b/RHEL6/input/profiles/manual_remediation.xml
@@ -22,7 +22,6 @@
<select idref="aide_build_database" selected="true"/>
<select idref="wireless_disable_in_bios" selected="true"/>
<select idref="deactivate_wireless_interfaces"
selected="true"/>
-<select idref="iptables_log_and_drop_suspicious"
selected="true"/>
<select idref="network_ipv6_default_gateway" selected="true"/>
<select idref="no_files_unowned_by_user" selected="true"/>
<select idref="no_files_unowned_by_group" selected="true"/>
diff --git a/RHEL6/input/profiles/nist-CL-IL-AL.xml
b/RHEL6/input/profiles/nist-CL-IL-AL.xml
index 3abc947..1747198 100644
--- a/RHEL6/input/profiles/nist-CL-IL-AL.xml
+++ b/RHEL6/input/profiles/nist-CL-IL-AL.xml
@@ -219,7 +219,6 @@ assurance."</description>
<select idref="audit_file_deletions" selected="true" \>
<select idref="audit_sysadmin_actions" selected="true" \>
<select idref="audit_kernel_module_loading" selected="true" \>
-<select idref="iptables_log_and_drop_suspicious" selected="true"
\>
<select idref="set_sysctl_net_ipv4_conf_all_log_martians"
selected="true" \>
<!-- AC-17(8) -->
@@ -305,9 +304,6 @@ assurance."</description>
<select idref="network_ipv6_disable_rpc" selected="true" \>
<select idref="set_sysctl_net_ipv6_conf_default_accept_ra"
selected="true" \>
<select idref="set_sysctl_ipv6_default_accept_redirects"
selected="true" \>
-<!-- network_ipv6_limit_requests should likely be broken up into individual
- rules at some point -->
-<select idref="network_ipv6_limit_requests" selected="true" \>
<select idref="network_disable_unused_interfaces" selected="true"
\>
<select idref="network_disable_zeroconf" selected="true" \>
<select idref="network_sniffer_disabled" selected="true" \>
@@ -317,7 +313,6 @@ assurance."</description>
<select idref="disable_protocol_tipc" selected="true" \>
<select idref="set_iptables_default_rule" selected="true" \>
<select idref="set_iptables_default_rule_forward" selected="true"
\>
-<select idref="iptables_icmp_disabled" selected="true" \>
<select idref="disable_sysctl_ipv4_all_send_redirects"
selected="true" \>
<select idref="disable_sysctl_ipv4_ip_forward" selected="true"
\>
<select idref="set_sysctl_net_ipv4_conf_all_accept_source_route"
selected="true" \>
--
1.7.1