#193: False positive: set_sysctl_net_ipv4_icmp_ignore_bogus_error_responses
------------------------------+-------------------------------------
Reporter: Logan.Rodrian@… | Owner: mnewman23
Type: defect | Status: closed
Priority: major | Milestone: RHEL6 STIG OVAL Content
Component: OVAL content | Version: 0.5.0-InitialDraft
Resolution: worksforme | Keywords:
Blocked By: | Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):
* cc: scap-security-guide@… (added)
* resolution: => worksforme
* status: new => closed
Comment:
[root@rhel6 checks]# sysctl -w
net.ipv4.icmp_ignore_bogus_error_responses=1
net.ipv4.icmp_ignore_bogus_error_responses = 1
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_icmp_ignore_bogus_error_responses.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_icmp_ignore_bogus_error_responsesjpYIeF.xml
Definition oval:scap-security-guide.testing:def:295: true
Evaluation done.
[root@rhel6 checks]# sysctl -w
net.ipv4.icmp_ignore_bogus_error_responses=0
net.ipv4.icmp_ignore_bogus_error_responses = 0
[root@rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_icmp_ignore_bogus_error_responses.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_icmp_ignore_bogus_error_responsesEaLm0e.xml
Definition oval:scap-security-guide.testing:def:295: false
Evaluation done.
--
Ticket URL: <
https://fedorahosted.org/scap-security-guide/ticket/193#comment:1>
scap-security-guide <
http://fedorahosted.org/scap-security-guide>
scap-security-guide