I'd like to push to the repo. Is this patch ACK-worthy?
________________________________________
From: scap-security-guide-bounces(a)lists.fedorahosted.org
[scap-security-guide-bounces(a)lists.fedorahosted.org] on behalf of Michael Palmiotto
[mpalmiotto(a)tresys.com]
Sent: Friday, April 27, 2012 9:12 AM
To: scap-security-guide(a)lists.fedorahosted.org
Subject: [PATCH v2] M1 Incomplete Guidance - Proxy
Prose and OVAL checks for Proxy.
Michael Palmiotto (1):
M1 Incomplete Guidance - Proxy
.../service_squid_acls_configured_filemaker.xml | 40 ++
.../checks/service_squid_acls_configured_ftp.xml | 40 ++
.../service_squid_acls_configured_gopher.xml | 40 ++
.../service_squid_acls_configured_gss_http.xml | 40 ++
.../service_squid_acls_configured_http-mgmt.xml | 40 ++
.../checks/service_squid_acls_configured_http.xml | 40 ++
.../checks/service_squid_acls_configured_https.xml | 40 ++
.../service_squid_acls_configured_localhost.xml | 30 ++
.../service_squid_acls_configured_multiling.xml | 40 ++
.../checks/service_squid_acls_configured_wais.xml | 40 ++
.../service_squid_authentication_configured.xml | 30 ++
...ervice_squid_default_insecure_forwarded_for.xml | 30 ++
.../service_squid_default_insecure_log_mime.xml | 30 ++
...id_default_insecure_suppress_version_string.xml | 30 ++
.../service_squid_default_insecure_underscore.xml | 30 ++
.../input/checks/service_squid_logs_forwarded.xml | 30 ++
.../checks/service_squid_privileges_lowered.xml | 70 +++
.../checks/squid_default_secure_cache_group.xml | 30 ++
.../checks/squid_default_secure_cache_user.xml | 30 ++
.../checks/squid_default_secure_hostnames.xml | 30 ++
.../input/checks/squid_default_secure_passive.xml | 30 ++
.../checks/squid_default_secure_reply_header.xml | 30 ++
.../checks/squid_default_secure_request_header.xml | 30 ++
.../input/checks/squid_default_secure_sanity.xml | 30 ++
.../squid_default_secured_ignore_unknown.xml | 30 ++
.../input/checks/system_proxy_access_allowed.xml | 30 ++
rhel6/src/input/profiles/common.xml | 39 ++-
rhel6/src/input/services/squid.xml | 536 ++++++++++++++++++++
28 files changed, 1476 insertions(+), 9 deletions(-)
create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_filemaker.xml
create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_ftp.xml
create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_gopher.xml
create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_gss_http.xml
create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_http-mgmt.xml
create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_http.xml
create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_https.xml
create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_localhost.xml
create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_multiling.xml
create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_wais.xml
create mode 100644 rhel6/src/input/checks/service_squid_authentication_configured.xml
create mode 100644
rhel6/src/input/checks/service_squid_default_insecure_forwarded_for.xml
create mode 100644 rhel6/src/input/checks/service_squid_default_insecure_log_mime.xml
create mode 100644
rhel6/src/input/checks/service_squid_default_insecure_suppress_version_string.xml
create mode 100644 rhel6/src/input/checks/service_squid_default_insecure_underscore.xml
create mode 100644 rhel6/src/input/checks/service_squid_logs_forwarded.xml
create mode 100644 rhel6/src/input/checks/service_squid_privileges_lowered.xml
create mode 100644 rhel6/src/input/checks/squid_default_secure_cache_group.xml
create mode 100644 rhel6/src/input/checks/squid_default_secure_cache_user.xml
create mode 100644 rhel6/src/input/checks/squid_default_secure_hostnames.xml
create mode 100644 rhel6/src/input/checks/squid_default_secure_passive.xml
create mode 100644 rhel6/src/input/checks/squid_default_secure_reply_header.xml
create mode 100644 rhel6/src/input/checks/squid_default_secure_request_header.xml
create mode 100644 rhel6/src/input/checks/squid_default_secure_sanity.xml
create mode 100644 rhel6/src/input/checks/squid_default_secured_ignore_unknown.xml
create mode 100644 rhel6/src/input/checks/system_proxy_access_allowed.xml
--
1.7.6.5
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/scap-security-guide