This seems right to me.
I'd prefer having Steve or Peter comment on whether this is The Right
Way To Check, but it's certainly an improvement (which makes it good
enough to commit in my book, so you've got an ACK, and then we can
change if so told.)
On 09/12/2012 12:30 PM, Kenneth Stailey wrote:
CCE-14440-2 specifies to search the RPM summary tags of all packages
named gpg-pubkey for a text string indicating one of them is the
Red Hat release key but this is not possible to implement in OVAL 5.10.1.
This implementation builds on the SCAP content provided with USGCB 22.214.171.124
by searching for the Red Hat release key by RPM name, version and release
tags. It also confirms that the Red Hat auxiliary key is installed to
support this new feature that RHEL 6 has.
Kenneth Stailey (1):
Update CCE-14440-2 "Ensure Red Hat GPG Key is Installed"
.../checks/package_red_hat_gpgkeys_installed.xml | 45 ++++++++++++++++++++++
.../input/checks/package_rhn_gpgkey_installed.xml | 25 ------------
.../input/checks/templates/packages_installed.csv | 1 -
RHEL6/input/system/software/updating.xml | 2 +-
4 files changed, 46 insertions(+), 27 deletions(-)
create mode 100644 RHEL6/input/checks/package_red_hat_gpgkeys_installed.xml
delete mode 100644 RHEL6/input/checks/package_rhn_gpgkey_installed.xml