>From 46afac66ca5d0a1b331c1194d25b9485fcf078e3 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Wed, 23 Jan 2013 20:08:35 -0500 Subject: [PATCH] Creation of USGCB profile Began buildout of a profile which maps to requirements that drove the RHEL5 USGCB. Did not add to build system since this is far from ready. Submitting patch now for peer review -- typos, syntax errors, etc. - Left off at CCE-3840-6, need to complete some 150 more mappings & inclusions - At some point (aka, last) will review USGCB-->NIST mappings and update ours - Only included "bare requirements" that are in RHEL5 USGCB, have not added any additional content. Building out profile for basis of discussion. --- RHEL6/input/profiles/usgcb-rhel6-server.xml | 150 +++++++++++++++++++++++++++ RHEL6/input/system/network/kernel.xml | 2 +- 2 files changed, 151 insertions(+), 1 deletions(-) create mode 100644 RHEL6/input/profiles/usgcb-rhel6-server.xml diff --git a/RHEL6/input/profiles/usgcb-rhel6-server.xml b/RHEL6/input/profiles/usgcb-rhel6-server.xml new file mode 100644 index 0000000..6cf2d31 --- /dev/null +++ b/RHEL6/input/profiles/usgcb-rhel6-server.xml @@ -0,0 +1,150 @@ + +United States Government Configuration Baseline (USGCB) +This profile is a working draft for a USGCB submission against RHEL6 Server. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/RHEL6/input/system/network/kernel.xml b/RHEL6/input/system/network/kernel.xml index dff93dd..0f80df2 100644 --- a/RHEL6/input/system/network/kernel.xml +++ b/RHEL6/input/system/network/kernel.xml @@ -277,7 +277,7 @@ to be detected. Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It should be disabled unless it is absolutely required. - + -- 1.7.1