>From 4308f2130c98e16cf49f0ff819def6eb452eb959 Mon Sep 17 00:00:00 2001 From: root Date: Sat, 14 Jul 2012 12:07:11 -0400 Subject: [PATCH] Removed duplicate service_rhnsd_disabled [root@rhel6 output]# oscap xccdf eval --profile STIG-server rhel6-xccdf-stigformat.xml 1 1877 In file 'rhel6-xccdf-stigformat.xml' on line 7335: Element '{http://checklists.nist.gov/xccdf/1.1}Rule': Duplicate key-sequence ['service_rhnsd_disabled'] in key identity-constraint '{http://checklists.nist.gov/xccdf/1.1}selectableItemIdKey'. 1 1877 In file 'rhel6-xccdf-stigformat.xml' on line 7335: Element '{http://checklists.nist.gov/xccdf/1.1}Rule': Duplicate key-sequence ['service_rhnsd_disabled'] in key identity-constraint '{http://checklists.nist.gov/xccdf/1.1}ruleIdKey'. 1 1877 In file 'rhel6-xccdf-stigformat.xml' on line 7335: Element '{http://checklists.nist.gov/xccdf/1.1}Rule': Duplicate key-sequence ['service_rhnsd_disabled'] in key identity-constraint '{http://checklists.nist.gov/xccdf/1.1}itemIdKey'. Turns out there were two sections calling it: [root@rhel6 input]# grep -ri "service_rhnsd" * Binary file checks/.service_rhnsd_disabled.xml.swp matches ......... services/base.xml: services/base.xml: system/software/updating.xml: system/software/updating.xml: I kept flip flopping on what section to remove the duplicate service_rhnsd_disabled. I ended up choosing to remove the duplicate from system/software/updating.xml as rhnsd is a base service, and seems to make sense to call it out there. Thoughts from the group? --- RHEL6/input/system/software/updating.xml | 16 ---------------- 1 files changed, 0 insertions(+), 16 deletions(-) diff --git a/RHEL6/input/system/software/updating.xml b/RHEL6/input/system/software/updating.xml index 5a7757d..0918db1 100644 --- a/RHEL6/input/system/software/updating.xml +++ b/RHEL6/input/system/software/updating.xml @@ -33,22 +33,6 @@ are from Red Hat. - -Disable Red Hat Network Service (rhnsd) -The Red Hat Network service automatically queries Red Hat Network -servers to determine whether there are any actions that should be executed, -such as package updates. This only occurs if the system was registered to an -RHN server or satellite and managed as such. - - -Although systems management and patching is extremely important to -system security, management by a system outside the enterprise enclave is not -desirable for some environments. - - - - - Ensure Software Patches Installed The following command prints a list of packages that -- 1.7.1