>From 8d42270022be11ee84d128dd4eec54cd37a1612c Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Thu, 23 Jan 2014 00:54:35 -0500 Subject: [PATCH 01/10] Added sshd_set_idle_timeout to shared/ + RHEL7 - Moved sshd_set_idle_timeout.xml to shared/, tested on RHEL7, updated CPE info - Added to RHEL7 rht-ccp profile --- RHEL/6/input/checks/sshd_set_idle_timeout.xml | 38 +-------------------------- RHEL/7/input/checks/sshd_set_idle_timeout.xml | 1 + RHEL/7/input/profiles/rht-ccp.xml | 11 +++++--- scap-security-guide.spec | 6 ++++- shared/oval/sshd_set_idle_timeout.xml | 38 +++++++++++++++++++++++++++ 5 files changed, 52 insertions(+), 42 deletions(-) mode change 100644 => 120000 RHEL/6/input/checks/sshd_set_idle_timeout.xml create mode 120000 RHEL/7/input/checks/sshd_set_idle_timeout.xml create mode 100644 shared/oval/sshd_set_idle_timeout.xml diff --git a/RHEL/6/input/checks/sshd_set_idle_timeout.xml b/RHEL/6/input/checks/sshd_set_idle_timeout.xml deleted file mode 100644 index 5183876..0000000 --- a/RHEL/6/input/checks/sshd_set_idle_timeout.xml +++ /dev/null @@ -1,37 +0,0 @@ - - - - Set OpenSSH Idle Timeout Interval - - Red Hat Enterprise Linux 6 - - The SSH idle timeout interval should be set to an - appropriate value. - - - - - - - - - - - - - /etc/ssh/sshd_config - ^[\s]*(?i)ClientAliveInterval[\s]+(\d+)[\s]*$ - 1 - - - - - - diff --git a/RHEL/6/input/checks/sshd_set_idle_timeout.xml b/RHEL/6/input/checks/sshd_set_idle_timeout.xml new file mode 120000 index 0000000..2e9bd9a --- /dev/null +++ b/RHEL/6/input/checks/sshd_set_idle_timeout.xml @@ -0,0 +1 @@ +../../../../shared/oval/sshd_set_idle_timeout.xml \ No newline at end of file diff --git a/RHEL/7/input/checks/sshd_set_idle_timeout.xml b/RHEL/7/input/checks/sshd_set_idle_timeout.xml new file mode 120000 index 0000000..2e9bd9a --- /dev/null +++ b/RHEL/7/input/checks/sshd_set_idle_timeout.xml @@ -0,0 +1 @@ +../../../../shared/oval/sshd_set_idle_timeout.xml \ No newline at end of file diff --git a/RHEL/7/input/profiles/rht-ccp.xml b/RHEL/7/input/profiles/rht-ccp.xml index 7bf1318..02dcbd1 100644 --- a/RHEL/7/input/profiles/rht-ccp.xml +++ b/RHEL/7/input/profiles/rht-ccp.xml @@ -80,10 +80,11 @@ SSH / REMOTE ACCESS CHECKS - -->