On 10/25/12 5:11 PM, Michele Newman wrote:
RHEL6/input/auxiliary/alt-titles-stig.xml | 2 +- RHEL6/input/services/base.xml | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-)
diff --git a/RHEL6/input/auxiliary/alt-titles-stig.xml b/RHEL6/input/auxiliary/alt-titles-stig.xml index c3fa7bc..9805185 100644 --- a/RHEL6/input/auxiliary/alt-titles-stig.xml +++ b/RHEL6/input/auxiliary/alt-titles-stig.xml @@ -513,7 +513,7 @@ The qpidd service must not be running. The rdisc service must not be running.
</title> <title rule="service_rhnsd_disabled" shorttitle="Disable Red Hat Network Service (rhnsd)"> -The Red Hat Network Service (rhnsd) service must not be running. +The Red Hat Network Service (rhnsd) service must not be running, unless using RHN or an RHN Satellite. </title> <title rule="service_sysstat_disabled" shorttitle="Disable System Statistics Reset Service (sysstat)"> The sysstat service must not be running. diff --git a/RHEL6/input/services/base.xml b/RHEL6/input/services/base.xml index bda8350..7396512 100644 --- a/RHEL6/input/services/base.xml +++ b/RHEL6/input/services/base.xml @@ -405,7 +405,8 @@ RHN server or satellite and managed as such. <ocil><service-disable-check-macro service="rhnsd" /></ocil> <rationale>Although systems management and patching is extremely important to system security, management by a system outside the enterprise enclave is not -desirable for some environments.</rationale> +desirable for some environments. However, if the system is being managed by RHN or + RHN Satellite Server it can remain on, otherwise disable the service. </rationale> <ident cce="3416-5" /> <oval id="service_rhnsd_disabled" /> <ref nist="CM-6, CM-7" disa="382" />
Please resubmit with refined language.
"it" should be "the rhnsd daemon" and the "otherwise..." text isn't needed.