>From 3259031dd3c83a6088c339f1c6e5999f387c4636 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Sat, 20 Apr 2013 02:47:07 -0400 Subject: [PATCH] [bugfix] Ticket Rule "disable_at" duplicate "service_atd_disabled" Services/base.xml held service_atd_disabled, while services/cron.xml held disable_atd. Updated everything to use service_atd_disabled. Thank you to ruchkinalexandr for reporting! --- RHEL6/input/auxiliary/alt-titles-stig.xml | 3 --- RHEL6/input/profiles/common.xml | 1 - RHEL6/input/profiles/nist-CL-IL-AL.xml | 1 - RHEL6/input/profiles/stig-rhel6-server.xml | 2 +- RHEL6/input/profiles/usgcb-rhel6-server.xml | 2 +- RHEL6/input/services/base.xml | 21 --------------------- RHEL6/input/services/cron.xml | 22 +++++++++++++--------- 7 files changed, 15 insertions(+), 37 deletions(-) diff --git a/RHEL6/input/auxiliary/alt-titles-stig.xml b/RHEL6/input/auxiliary/alt-titles-stig.xml index d4a9cf0..6f4a59a 100644 --- a/RHEL6/input/auxiliary/alt-titles-stig.xml +++ b/RHEL6/input/auxiliary/alt-titles-stig.xml @@ -530,9 +530,6 @@ The sysstat service must not be running. The cron service must be running. - -The atd service must be disabled. - The SSH daemon must be configured to use only the SSHv2 protocol. diff --git a/RHEL6/input/profiles/common.xml b/RHEL6/input/profiles/common.xml index 2a7565a..2a97ac7 100644 --- a/RHEL6/input/profiles/common.xml +++ b/RHEL6/input/profiles/common.xml @@ -161,7 +161,6 @@ - diff --git a/RHEL6/input/profiles/stig-rhel6-server.xml b/RHEL6/input/profiles/stig-rhel6-server.xml index 3650ffc..460143a 100644 --- a/RHEL6/input/profiles/stig-rhel6-server.xml +++ b/RHEL6/input/profiles/stig-rhel6-server.xml @@ -95,6 +95,6 @@ - diff --git a/RHEL6/input/profiles/usgcb-rhel6-server.xml b/RHEL6/input/profiles/usgcb-rhel6-server.xml index af95ac2..8d89f10 100644 --- a/RHEL6/input/profiles/usgcb-rhel6-server.xml +++ b/RHEL6/input/profiles/usgcb-rhel6-server.xml @@ -217,8 +217,8 @@ - + diff --git a/RHEL6/input/services/base.xml b/RHEL6/input/services/base.xml index 3453e9a..9e86170 100644 --- a/RHEL6/input/services/base.xml +++ b/RHEL6/input/services/base.xml @@ -42,27 +42,6 @@ it is appropriate. - -Disable At Service (atd) -The at and batch commands can be used to -schedule tasks that are meant to be executed only once. This allows delayed -execution in a manner similar to cron, except that it is not -recurring. The daemon atd keeps track of tasks scheduled via -at and batch, and executes them at the specified time. - - - - -The atd service could be used by an unsophisticated insider to carry -out activities outside of a normal login session, which could complicate -accountability. Furthermore, the need to schedule tasks with at or -batch is not common. - - - - - - Disable Certmonger Service (certmonger) Certmonger is a D-Bus based service that attempts to simplify interaction diff --git a/RHEL6/input/services/cron.xml b/RHEL6/input/services/cron.xml index 5972a7f..422d74d 100644 --- a/RHEL6/input/services/cron.xml +++ b/RHEL6/input/services/cron.xml @@ -111,21 +111,25 @@ access to these files should be disabled. --> - - -Disable atd Service - + +Disable At Service (atd) +The at and batch commands can be used to +schedule tasks that are meant to be executed only once. This allows delayed +execution in a manner similar to cron, except that it is not +recurring. The daemon atd keeps track of tasks scheduled via +at and batch, and executes them at the specified time. -Many of the periodic or delayed execution features of the at -daemon can be provided through the cron daemon instead. +The atd service could be used by an unsophisticated insider to carry +out activities outside of a normal login session, which could complicate +accountability. Furthermore, the need to schedule tasks with at or +batch is not common. - + - - + -- 1.7.1