On Thursday, September 13, 2012 04:07:06 PM Jeffrey Blank wrote:
This seems right to me.
I'd prefer having Steve or Peter comment on whether this is The Right
Way To Check, but it's certainly an improvement (which makes it good
enough to commit in my book, so you've got an ACK, and then we can
change if so told.)
Checking for the rpm name is as good as it gets. :-)
On 09/12/2012 12:30 PM, Kenneth Stailey wrote:
> CCE-14440-2 specifies to search the RPM summary tags of all packages
> named gpg-pubkey for a text string indicating one of them is the
> Red Hat release key but this is not possible to implement in OVAL 5.10.1.
> This implementation builds on the SCAP content provided with USGCB 220.127.116.11
> by searching for the Red Hat release key by RPM name, version and release
> tags. It also confirms that the Red Hat auxiliary key is installed to
> support this new feature that RHEL 6 has.
> Kenneth Stailey (1):
> Update CCE-14440-2 "Ensure Red Hat GPG Key is Installed"
> .../checks/package_red_hat_gpgkeys_installed.xml | 45
> ++++++++++++++++++++++ .../input/checks/package_rhn_gpgkey_installed.xml
> | 25 ------------ .../input/checks/templates/packages_installed.csv |
> 1 -
> RHEL6/input/system/software/updating.xml | 2 +-
> 4 files changed, 46 insertions(+), 27 deletions(-)
> create mode 100644
> delete mode 100644 RHEL6/input/checks/package_rhn_gpgkey_installed.xml
scap-security-guide mailing list