This is largely about deleting vestigial OVAL checks.
Some of the remaining "OVAL Check is not referenced by XCCDF" messages which
"make validate" produces call for more investigation.
And of course the OVAL schematron still has problems. But this gets us
closer.
Jeffrey Blank (6):
removal of packages from check templates
removal or correction of misnamed or obsolete OVAL checks
removal of comments, reference to nonexistent OVAL
refine verify-references to deal only with OVAL compliance checks for
OVAL
removal of references to nonexistent OVAL for some NFS guidance
corrections for typos in OVAL references
.../accounts_no_nis_inclusions_etc_passwd.xml | 23 ------
.../input/checks/audit_rules_dac_modification.xml | 40 -----------
RHEL6/input/checks/cups_limit_web_interface.xml | 30 --------
RHEL6/input/checks/file_mode_etc_crontab.xml | 33 ---------
RHEL6/input/checks/file_ownership_etc_skel.xml | 39 -----------
.../file_permissions_boot_grub_grub_conf.xml | 46 -------------
RHEL6/input/checks/file_user_owner_etc_crontab.xml | 25 -------
RHEL6/input/checks/mount_option_nodev_on_tmp.xml | 30 --------
.../input/checks/package_ipsec-tools_installed.xml | 25 -------
RHEL6/input/checks/package_talk-server_removed.xml | 25 -------
RHEL6/input/checks/package_talk_removed.xml | 25 -------
RHEL6/input/checks/service_abrtd_disabled.xml | 3 +
RHEL6/input/checks/sysconfig_ipv6_disable.xml | 37 ----------
RHEL6/input/checks/sysconfig_ipv6_networking.xml | 37 ----------
.../checks/sysconfig_networking_ipv6_ifcfg.xml | 37 ----------
...tl_net_ipv6_conf_default_accept_ra_rtr_pref.xml | 31 ---------
RHEL6/input/checks/templates/Makefile | 4 +-
.../input/checks/templates/packages_installed.csv | 5 --
RHEL6/input/checks/templates/packages_removed.csv | 3 -
RHEL6/input/checks/templates/services_disabled.csv | 2 +-
RHEL6/input/checks/xwindows_remote_listening.xml | 30 --------
RHEL6/input/services/http.xml | 72 --------------------
RHEL6/input/services/nfs.xml | 4 -
RHEL6/input/services/obsolete.xml | 2 +-
RHEL6/input/system/permissions/partitions.xml | 2 +-
RHEL6/utils/verify-references.py | 5 +-
26 files changed, 11 insertions(+), 604 deletions(-)
delete mode 100644 RHEL6/input/checks/accounts_no_nis_inclusions_etc_passwd.xml
delete mode 100644 RHEL6/input/checks/audit_rules_dac_modification.xml
delete mode 100644 RHEL6/input/checks/cups_limit_web_interface.xml
delete mode 100644 RHEL6/input/checks/file_mode_etc_crontab.xml
delete mode 100644 RHEL6/input/checks/file_ownership_etc_skel.xml
delete mode 100644 RHEL6/input/checks/file_permissions_boot_grub_grub_conf.xml
delete mode 100644 RHEL6/input/checks/file_user_owner_etc_crontab.xml
delete mode 100644 RHEL6/input/checks/mount_option_nodev_on_tmp.xml
delete mode 100644 RHEL6/input/checks/package_ipsec-tools_installed.xml
delete mode 100644 RHEL6/input/checks/package_talk-server_removed.xml
delete mode 100644 RHEL6/input/checks/package_talk_removed.xml
delete mode 100644 RHEL6/input/checks/sysconfig_ipv6_disable.xml
delete mode 100644 RHEL6/input/checks/sysconfig_ipv6_networking.xml
delete mode 100644 RHEL6/input/checks/sysconfig_networking_ipv6_ifcfg.xml
delete mode 100644
RHEL6/input/checks/sysctl_net_ipv6_conf_default_accept_ra_rtr_pref.xml
delete mode 100644 RHEL6/input/checks/xwindows_remote_listening.xml