On 5/1/12 7:18 PM, Willy Santos wrote:
CCI-001436 requires disabling of networking protocols deemed to be
nonsecure. disable_vsftpd meets that requirement, among others.
Signed-off-by: Willy Santos<wsantos(a)redhat.com>
---
rhel6/src/input/services/ftp.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/services/ftp.xml b/rhel6/src/input/services/ftp.xml
index 98a9e98..5955e87 100644
--- a/rhel6/src/input/services/ftp.xml
+++ b/rhel6/src/input/services/ftp.xml
@@ -28,7 +28,7 @@ a risk of compromising sensitive information.
</rationale>
<ident cce="3919-8" />
<oval id="service_vsftpd_disabled" />
-<ref nist="CM-6, CM-7" />
+<ref nist="CM-6, CM-7" disa="1436"/>
</Rule>
<Rule id="uninstall_vsftpd">
Ack