On 9/27/13 5:38 PM, Tony James wrote:

0001-OVAL-signoff-on-service_rhnsd_disabled.xml.patch

From 7c449cf51e09694274e596b5d46c790000cabaf7 Mon Sep 17 00:00:00 2001
From: Tony James <tony@redhat.com>
Date: Fri, 27 Sep 2013 17:23:56 -0400
Subject: [PATCH] OVAL signoff on service_rhnsd_disabled.xml

[tony@rhel6 checks]$ ./testcheck.py service_rhnsd_disabled.xml
Evaluating with OVAL tempfile : /tmp/service_rhnsd_disabled4jfbEx.xml
Writing results to : /tmp/service_rhnsd_disabled4jfbEx.xml-results
Definition oval:scap-security-guide.testing:def:101: false
Definition oval:scap-security-guide.testing:def:100: false
Evaluation done.
[tony@rhel6 checks]$ chkconfig rhnsd off
You do not have enough privileges to perform this operation.
[tony@rhel6 checks]$ sudo chkconfig rhnsd off
[tony@rhel6 checks]$ ./testcheck.py service_rhnsd_disabled.xml
Evaluating with OVAL tempfile : /tmp/service_rhnsd_disabledbWy4lJ.xml
Writing results to : /tmp/service_rhnsd_disabledbWy4lJ.xml-results
Definition oval:scap-security-guide.testing:def:101: false
Definition oval:scap-security-guide.testing:def:100: true
Evaluation done.
[tony@rhel6 checks]$ sudo service rhnsd stop
Stopping Red Hat Network Daemon:                           [  OK  ]
[tony@rhel6 checks]$ ./testcheck.py service_rhnsd_disabled.xml
Evaluating with OVAL tempfile : /tmp/service_rhnsd_disabledrq9CRE.xml
Writing results to : /tmp/service_rhnsd_disabledrq9CRE.xml-results
Definition oval:scap-security-guide.testing:def:101: false
Definition oval:scap-security-guide.testing:def:100: true
Evaluation done.
---
 RHEL6/input/checks/service_rhnsd_disabled.xml |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/RHEL6/input/checks/service_rhnsd_disabled.xml b/RHEL6/input/checks/service_rhnsd_disabled.xml
index ff0779f..240ed80 100644
--- a/RHEL6/input/checks/service_rhnsd_disabled.xml
+++ b/RHEL6/input/checks/service_rhnsd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The rhnsd service should be disabled if possible.</description>
+      <reference source="tony" ref_id="20130927" ref_url="test_attestation"/>
     </metadata>
    <criteria comment="package rhnsd removed or service rhnsd is not configured to start" operator="OR">
     <extend_definition comment="rhnsd removed" definition_ref="package_rhnsd_removed" />
-- 1.7.1
finally getting off your rear and becoming a commiter, eh? ;) welcome!

ack