>From e044f217f5f6fe1e6c36dffc64f9fd3015afcb24 Mon Sep 17 00:00:00 2001 From: shawn Date: Sun, 22 Dec 2013 14:44:25 -0500 Subject: [PATCH 02/25] RHEL6: selinux_bootloader_notdisabled.xml -> enable_selinux_bootloader.xml - Updated OVAL to match XCCDF name Signed-off-by: Shawn Wells --- :000000 100644 0000000... 2a1caf2... A RHEL/6/input/checks/enable_selinux_bootloader.xml :100644 000000 368902d... 0000000... D RHEL/6/input/checks/selinux_bootloader_notdisabled.xml :100644 100644 3b6b338... 1e7c0af... M RHEL/6/input/system/selinux.xml RHEL/6/input/checks/enable_selinux_bootloader.xml | 29 ++++++++++++++++++++++ .../checks/selinux_bootloader_notdisabled.xml | 29 ---------------------- RHEL/6/input/system/selinux.xml | 2 +- 3 files changed, 30 insertions(+), 30 deletions(-) diff --git a/RHEL/6/input/checks/enable_selinux_bootloader.xml b/RHEL/6/input/checks/enable_selinux_bootloader.xml new file mode 100644 index 0000000..2a1caf2 --- /dev/null +++ b/RHEL/6/input/checks/enable_selinux_bootloader.xml @@ -0,0 +1,29 @@ + + + + Enable SELinux in /etc/grub.conf + + Red Hat Enterprise Linux 6 + + + Check if selinux=0 OR enforcing=0 within /etc/grub.conf lines, fail if found. + + + + + + + + + + + + /etc/grub.conf + ^[\s]*kernel[\s]+.*(selinux|enforcing)=0.*$ + 1 + + diff --git a/RHEL/6/input/checks/selinux_bootloader_notdisabled.xml b/RHEL/6/input/checks/selinux_bootloader_notdisabled.xml deleted file mode 100644 index 368902d..0000000 --- a/RHEL/6/input/checks/selinux_bootloader_notdisabled.xml +++ /dev/null @@ -1,29 +0,0 @@ - - - - Enable SELinux in /etc/grub.conf - - Red Hat Enterprise Linux 6 - - - Check if selinux=0 OR enforcing=0 within /etc/grub.conf lines, fail if found. - - - - - - - - - - - - /etc/grub.conf - ^[\s]*kernel[\s]+.*(selinux|enforcing)=0.*$ - 1 - - diff --git a/RHEL/6/input/system/selinux.xml b/RHEL/6/input/system/selinux.xml index 3b6b338..1e7c0af 100644 --- a/RHEL/6/input/system/selinux.xml +++ b/RHEL/6/input/system/selinux.xml @@ -98,7 +98,7 @@ it from confining system services at boot time. Further, it increases the chances that it will remain off during system operation. - + -- 1.8.3.1