excellent, please push.
On 04/30/2013 04:21 PM, David Smith wrote:
Signed-off-by: David Smith <dsmith(a)eclipse.ncsc.mil>
---
RHEL6/input/services/http.xml | 4 ++--
RHEL6/input/services/mail.xml | 1 +
RHEL6/input/system/network/ipsec.xml | 2 +-
3 files changed, 4 insertions(+), 3 deletions(-)
diff --git a/RHEL6/input/services/http.xml b/RHEL6/input/services/http.xml
index 0a2934d..3ca959a 100644
--- a/RHEL6/input/services/http.xml
+++ b/RHEL6/input/services/http.xml
@@ -645,7 +645,7 @@ Install the <tt>mod_ssl</tt> module:
content is transmitted in plain text which could be passively monitored and accessed by
unauthorized parties.
</rationale>
-<!--<ident cce="26900-1" />-->
+<ident cce="27403-5" />
<oval id="package_mod_ssl_installed" />
<!--<ref nist="CM-7" />-->
</Rule>
@@ -676,7 +676,7 @@ Install the <tt>security</tt> module:
enabling the administrator to implement content access policies and filters at the
application layer.
</rationale>
-<!--<ident cce="26900-1" />-->
+<ident cce="27525-5" />
<oval id="package_mod_security_installed" />
<!--<ref nist="CM-7" />-->
</Rule>
diff --git a/RHEL6/input/services/mail.xml b/RHEL6/input/services/mail.xml
index 6003e62..de938c9 100644
--- a/RHEL6/input/services/mail.xml
+++ b/RHEL6/input/services/mail.xml
@@ -56,6 +56,7 @@ not installed by default.
its design prevents it from being effectively contained by SELinux. Postfix
should be used instead.
</rationale>
+<ident cce="27515-6" />
<ref nist="CM-7" />
<tested by="DS" on="20121024"/>
</Rule>
diff --git a/RHEL6/input/system/network/ipsec.xml b/RHEL6/input/system/network/ipsec.xml
index f73e493..e4fffc3 100644
--- a/RHEL6/input/system/network/ipsec.xml
+++ b/RHEL6/input/system/network/ipsec.xml
@@ -17,7 +17,7 @@ untrusted networks. <package-install-macro
package="openswan"/>
to initiate a secure VPN connection protects information when it is
transmitted over a wide area network.
</rationale>
-<!--<ident cce="TODO" />-->
+<ident cce="27626-1" />
<oval id="package_openswan_installed" />
<ref nist="AC-17, MA-4, SC-9" disa="1130,1131" />
</Rule>
--