>From 94d4982662bc04f51cbaac6906fb917add16fcee Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Sat, 20 Apr 2013 02:35:35 -0400 Subject: [PATCH] [bugfix] Ticket 382 - Rule "Disable tftp Service" always true As reported by ruchkinalexandr, tftp check always returned true. Updated to reflect proper settings in /etc/xinetd vs init [root@rhel6 checks]# chkconfig tftp on [root@rhel6 checks]# ./testcheck.py service_tftp_disabled.xml Evaluating with OVAL tempfile : /tmp/service_tftpd_disabledRjb75o.xml Definition oval:scap-security-guide.testing:def:350: false Evaluation done. [root@rhel6 checks]# chkconfig tftp off [root@rhel6 checks]# ./testcheck.py service_tftp_disabled.xml Evaluating with OVAL tempfile : /tmp/service_tftpd_disabled0HtYRQ.xml Definition oval:scap-security-guide.testing:def:350: true Evaluation done. --- RHEL6/input/checks/service_tftp_disabled.xml | 109 +++++--------------------- 1 files changed, 19 insertions(+), 90 deletions(-) diff --git a/RHEL6/input/checks/service_tftp_disabled.xml b/RHEL6/input/checks/service_tftp_disabled.xml index 73f7b5b..711a781 100644 --- a/RHEL6/input/checks/service_tftp_disabled.xml +++ b/RHEL6/input/checks/service_tftp_disabled.xml @@ -1,99 +1,28 @@ - - + - Service tftp Disabled + Disable tftp Service Red Hat Enterprise Linux 6 - The tftp service should be disabled if possible. + Disable tftp Service - - - - - - - - - - - + + - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - tftp - 0 - - - tftp - 1 - - - tftp - 2 - - - tftp - 3 - - - tftp - 4 - - - tftp - 5 - - - tftp - 6 - - - false - true - + + + + + + /etc/xinetd.d + tftp + disable\s=\syes + 1 + -- 1.7.1