>From 5b69c93d2bb4fd62e87c2ee93236d261a1c6ac72 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Thu, 13 Dec 2012 19:44:16 -0500 Subject: [PATCH 01/28] Housekeeping of OVAL references These rules didn't actually have OVAL counterparts, moving them "TODO" --- RHEL6/input/services/http.xml | 8 ++++---- RHEL6/input/services/nfs.xml | 16 ++++++++-------- RHEL6/input/system/accounts/banners.xml | 2 +- RHEL6/input/system/logging.xml | 2 +- RHEL6/input/system/permissions/mounting.xml | 2 +- 5 files changed, 15 insertions(+), 15 deletions(-) diff --git a/RHEL6/input/services/http.xml b/RHEL6/input/services/http.xml index d1f396b..02fca5c 100644 --- a/RHEL6/input/services/http.xml +++ b/RHEL6/input/services/http.xml @@ -120,7 +120,7 @@ Information disclosed to clients about the configuration of the web server and s to plan an attack on the given system. This information disclosure should be restricted to a minimum. - + @@ -138,7 +138,7 @@ Information disclosed to clients about the configuration of the web server and s to plan an attack on the given system. This information disclosure should be restricted to a minimum. - + @@ -648,7 +648,7 @@ content is transmitted in plain text which could be passively monitored and acce unauthorized parties. - + @@ -679,7 +679,7 @@ enabling the administrator to implement content access policies and filters at t application layer. - + diff --git a/RHEL6/input/services/nfs.xml b/RHEL6/input/services/nfs.xml index c67abd0..858aa9e 100644 --- a/RHEL6/input/services/nfs.xml +++ b/RHEL6/input/services/nfs.xml @@ -213,7 +213,7 @@ Restrict service to always use a given port, so that firewalling can be done effectively. - + @@ -230,7 +230,7 @@ your network. Restrict service to always use a given port, so that firewalling can be done effectively. - + @@ -245,7 +245,7 @@ Where statd-port is a port which is not used by any other service on yo Restrict service to always use a given port, so that firewalling can be done effectively. - + @@ -260,7 +260,7 @@ Where mountd-port is a port which is not used by any other service on y Restrict service to always use a given port, so that firewalling can be done effectively. - + @@ -451,7 +451,7 @@ Ensure that no line in /etc/exports contains the option no_root_squ If the NFS server allows root access to local file systems from remote hosts, this access could be used to compromise the system. - + @@ -467,7 +467,7 @@ Ensure that no line in /etc/exports contains the option insecure - + @@ -490,8 +490,8 @@ To verify insecure file locking has been disabled, run the following command. Allowing insecure file locking could allow for sensitive data to be viewed or edited by an unauthorized user. - - + + diff --git a/RHEL6/input/system/accounts/banners.xml b/RHEL6/input/system/accounts/banners.xml index 4961b15..e4f886c 100644 --- a/RHEL6/input/system/accounts/banners.xml +++ b/RHEL6/input/system/accounts/banners.xml @@ -143,7 +143,7 @@ Although unlikely to dissuade a serious attacker, the warning message reinforces policy awareness during the logon process. -