>From 42095be4c994f381be5e12a206f1283639c8e522 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Thu, 29 Aug 2013 23:48:33 -0400 Subject: [PATCH 3/4] OVAL testing for template_kernel_module_disabled OVAL signoff [root@rhel6 checks]# echo "install cramfs /bin/false" > /etc/modprobe.d/cramfs.conf ; ./testcheck.py kernel_module_cramfs_disabled.xml Evaluating with OVAL tempfile : /tmp/kernel_module_cramfs_disabledTDi2Qe.xml Writing results to : /tmp/kernel_module_cramfs_disabledTDi2Qe.xml-results Definition oval:scap-security-guide.testing:def:100: true Evaluation done. [root@rhel6 checks]# echo "#install cramfs /bin/false" > /etc/modprobe.d/cramfs.conf ; ./testcheck.py kernel_module_cramfs_disabled.xml Evaluating with OVAL tempfile : /tmp/kernel_module_cramfs_disabledHpe7xy.xml Writing results to : /tmp/kernel_module_cramfs_disabledHpe7xy.xml-results Definition oval:scap-security-guide.testing:def:100: false Evaluation done. [root@rhel6 checks]# rm /etc/modprobe.d/cramfs.conf ; ./testcheck.py kernel_module_cramfs_disabled.xml rm: remove regular file `/etc/modprobe.d/cramfs.conf'? y Evaluating with OVAL tempfile : /tmp/kernel_module_cramfs_disabledv71mrB.xml Writing results to : /tmp/kernel_module_cramfs_disabledv71mrB.xml-results Definition oval:scap-security-guide.testing:def:100: false Evaluation done. --- .../input/checks/kernel_module_cramfs_disabled.xml | 1 + RHEL6/input/checks/kernel_module_dccp_disabled.xml | 1 + .../checks/kernel_module_freevxfs_disabled.xml | 1 + RHEL6/input/checks/kernel_module_hfs_disabled.xml | 1 + .../checks/kernel_module_hfsplus_disabled.xml | 1 + .../input/checks/kernel_module_jffs2_disabled.xml | 1 + RHEL6/input/checks/kernel_module_rds_disabled.xml | 1 + RHEL6/input/checks/kernel_module_sctp_disabled.xml | 1 + .../checks/kernel_module_squashfs_disabled.xml | 1 + RHEL6/input/checks/kernel_module_tipc_disabled.xml | 1 + RHEL6/input/checks/kernel_module_udf_disabled.xml | 1 + .../checks/kernel_module_usb-storage_disabled.xml | 1 + .../templates/template_kernel_module_disabled | 1 + 13 files changed, 13 insertions(+), 0 deletions(-) diff --git a/RHEL6/input/checks/kernel_module_cramfs_disabled.xml b/RHEL6/input/checks/kernel_module_cramfs_disabled.xml index 5aeec48..c157530 100644 --- a/RHEL6/input/checks/kernel_module_cramfs_disabled.xml +++ b/RHEL6/input/checks/kernel_module_cramfs_disabled.xml @@ -8,6 +8,7 @@ Red Hat Enterprise Linux 6 The kernel module cramfs should be disabled. + Red Hat Enterprise Linux 6 The kernel module dccp should be disabled. + Red Hat Enterprise Linux 6 The kernel module freevxfs should be disabled. + Red Hat Enterprise Linux 6 The kernel module hfs should be disabled. + Red Hat Enterprise Linux 6 The kernel module hfsplus should be disabled. + Red Hat Enterprise Linux 6 The kernel module jffs2 should be disabled. + Red Hat Enterprise Linux 6 The kernel module rds should be disabled. + Red Hat Enterprise Linux 6 The kernel module sctp should be disabled. + Red Hat Enterprise Linux 6 The kernel module squashfs should be disabled. + Red Hat Enterprise Linux 6 The kernel module tipc should be disabled. + Red Hat Enterprise Linux 6 The kernel module udf should be disabled. + Red Hat Enterprise Linux 6 The kernel module usb-storage should be disabled. + Red Hat Enterprise Linux 6 The kernel module KERNMODULE should be disabled. +