>From 42e2a004b34fb41f47c4b38d7859b9191553794a Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Sun, 14 Apr 2013 03:56:09 -0400 Subject: [PATCH 5/5] Enabled OVAL for service_ntpdate_disabled - Uncommented OVAL rule in XCCDF - Created OVAL for ntpdate via checks/templates/ process. Had to create OVAL for package & service checks for everything to work. --- RHEL6/input/checks/package_ntpdate_removed.xml | 25 ++++++ RHEL6/input/checks/service_ntpdate_disabled.xml | 99 +++++++++++++++++++++++ RHEL6/input/services/base.xml | 2 +- 3 files changed, 125 insertions(+), 1 deletions(-) create mode 100644 RHEL6/input/checks/package_ntpdate_removed.xml create mode 100644 RHEL6/input/checks/service_ntpdate_disabled.xml diff --git a/RHEL6/input/checks/package_ntpdate_removed.xml b/RHEL6/input/checks/package_ntpdate_removed.xml new file mode 100644 index 0000000..a78fb82 --- /dev/null +++ b/RHEL6/input/checks/package_ntpdate_removed.xml @@ -0,0 +1,25 @@ + + + + + Package ntpdate Removed + + Red Hat Enterprise Linux 6 + + The RPM package ntpdate should be removed. + + + + + + + + + + ntpdate + + diff --git a/RHEL6/input/checks/service_ntpdate_disabled.xml b/RHEL6/input/checks/service_ntpdate_disabled.xml new file mode 100644 index 0000000..67fcbbd --- /dev/null +++ b/RHEL6/input/checks/service_ntpdate_disabled.xml @@ -0,0 +1,99 @@ + + + + + Service ntpdate Disabled + + Red Hat Enterprise Linux 6 + + The ntpdate service should be disabled if possible. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ntpdate + 0 + + + ntpdate + 1 + + + ntpdate + 2 + + + ntpdate + 3 + + + ntpdate + 4 + + + ntpdate + 5 + + + ntpdate + 6 + + + false + true + + diff --git a/RHEL6/input/services/base.xml b/RHEL6/input/services/base.xml index 5b1aae4..3453e9a 100644 --- a/RHEL6/input/services/base.xml +++ b/RHEL6/input/services/base.xml @@ -263,7 +263,7 @@ are rebooted frequently enough that clock drift does not cause problems between reboots. In any event, the functionality of the ntpdate service is now available in the ntpd program and should be considered deprecated. - + -- 1.7.1