Hello Ronald, Michael, folks,
----- Original Message -----
From: "Ronald" <mini.pelle(a)gmail.com>
To: "SCAP Security Guide" <scap-security-guide(a)lists.fedorahosted.org>
Sent: Tuesday, April 1, 2014 2:53:59 PM
Subject: Re: ensure_gpgcheck_globally_activated
no problem.
Shall this diff be integrated in further releases?
(Slightly modified version) Will be, yes. See below.
github-like pull request
feature would be ideal to better manage patches and enable efficient
community patch submission.
Ronald
On Tue, Apr 1, 2014 at 2:14 PM, Delorenzo, Michael A CIV USARMY ARDEC (US) <
michael.a.delorenzo8.civ(a)mail.mil > wrote:
Ronald,
Thank you for the information. This worked out fine for me.
Thanks,
Michael DeLorenzo
Computer Scientist
Picatinny Arsenal
Business Transformation & E-Systems Office, RDAR-WSE, Building 93
W: (973)-724-1370
BB: (862)-432-6071
-----Original Message-----
From: scap-security-guide-bounces(a)lists.fedorahosted.org [mailto:
scap-security-guide-bounces(a)lists.fedorahosted.org ] On Behalf Of Ronald
Sent: Tuesday, April 01, 2014 6:15 AM
To: SCAP Security Guide
Subject: Re: ensure_gpgcheck_globally_activated
its because the XCCDF test ensure_gpgcheck_globally_activated (in file
"system/software/updating.xml") references an unknown/non-existent OVAL
check (yum_gpgcheck_global_activation).
This is correct (looks to be undesired side effect of RHEL6 content
to RHEL/6 and RHEL/7 content migration:
https://git.fedorahosted.org/cgit/scap-security-guide.git/commit/RHEL/6/i...
)
Originally there truly seems to have been "yum_gpgcheck_global_activation"
OVAL check since Fedora has had the same name (content created before the
RHEL/ directory split yet). In any case "ensure_gpgcheck_globally_activated"
name is the right one, the /etc/yum.conf gpgcheck=1 ? check should be referred
under now.
Attached is a patch fixing this for all of RHEL-{6,7} and Fedora.
Please review.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
P.S.: The proposal has been tested on all of RHEL-{6,7} and Fedora Rawhide
products, and seems to be working properly.
P.S.#2: It's possible due to RHEL6 to RHEL/{6,7} directory structure migration
there will be more issues like this one (though on brief testing could
find more of them). In any case further testing & issue reports to the
list appreciated as always.
I solved this by changing yum_gpgcheck_global_activation to
"ensure_gpgcheck_globally_activated" (which is the valid OVAL check ref id
in checks/ensure_gpgcheck_globally_activated.xml) in file
"system/software/updating.xml"
Find diff file in attachment.
krs,
Ronald
On Mon, Mar 31, 2014 at 7:32 PM, Delorenzo, Michael A CIV USARMY ARDEC (US) <
michael.a.delorenzo8.civ(a)mail.mil > wrote:
Hello everyone,
I noticed that after a newer git pull this referenced check is now set as not
checked, when it previously was checked. I can't seem to find an explanation
in the mailing list emails. Does anyone have any explanation?
Thanks,
Michael DeLorenzo
Computer Scientist
Picatinny Arsenal
Business Transformation & E-Systems Office, RDAR-WSE, Building 93
W: (973)-724-1370 <tel:%28973%29-724-1370>
BB: (862)-432-6071 <tel:%28862%29-432-6071>
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide