Attached patch fixes remediation script for sshd set
keepalive (ClientAliveCountMax) rule, since it has been
reported to cause issues:
[1]
https://lists.fedorahosted.org/pipermail/scap-security-guide/2013-Decembe...
when Match block present in sshd config and moves it
to /shared fixes directory.
Tests succeeded for all four (sub)cases:
* no ClientAliveCountMax and no Match block
* ClientAliveCountMax already present, no Match block
* ClientAliveCountMax not present, Match block present
* both of ClientAliveCountMax and Match block directives present
in sshd config.
Pushed to master.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team