CCE-14440-2 specifies to search the RPM summary tags of all packages
named gpg-pubkey for a text string indicating one of them is the
Red Hat release key but this is not possible to implement in OVAL 5.10.1.
This implementation builds on the SCAP content provided with USGCB 1.0.5.0
by searching for the Red Hat release key by RPM name, version and release
tags. It also confirms that the Red Hat auxiliary key is installed to
support this new feature that RHEL 6 has.
Kenneth Stailey (1):
Update CCE-14440-2 "Ensure Red Hat GPG Key is Installed"
.../checks/package_red_hat_gpgkeys_installed.xml | 45 ++++++++++++++++++++++
.../input/checks/package_rhn_gpgkey_installed.xml | 25 ------------
.../input/checks/templates/packages_installed.csv | 1 -
RHEL6/input/system/software/updating.xml | 2 +-
4 files changed, 46 insertions(+), 27 deletions(-)
create mode 100644 RHEL6/input/checks/package_red_hat_gpgkeys_installed.xml
delete mode 100644 RHEL6/input/checks/package_rhn_gpgkey_installed.xml
--
1.7.12