Michael,

Let's split up the rest of the empty OCIL/check cells.  Would you mind working with the auditd section, Periodic AIDE Execution, Disable Core Dumps for All Users, and the disabling of USB/Bluetooth?

-Dave


On 09/26/2012 09:01 PM, Michael J. McConachie wrote:
Jeff,

I finished adding "this is a finding" clauses to pre-existing <ocil> tags; I would like to start on the blank rows in the OCIL/check text column and insert (at a minimum) <ocil clause="(this is a finding)"> on each one, so that at least we have that step done for every row on the ST page.

The we can auto-fill the bulk of the verbiage that's left to do with macros at a later time as they are established, right?

Does this sound good?  If so, I'll get started on adding the checks to those remaining blank boxes.

R/S
--
Red Hat Consulting
Michael J. McConachie, RHCE
Consultant - Red Hat, Inc.
michael@redhat.com


_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide


-- 
David Smith
410.854.5757
Commercial Solutions
Global Mitigations Office
National Security Agency