On 8/29/13 9:16 PM, Jeffrey Blank wrote:
As promised, here is a display of the OVAL testing progress on
scap-security-guide, against the Rules for the STIG profile:
http://scap-securityguide.rhcloud.com/RHEL6/output/table-stig-rhel6-testi...
A very fat green bar in the "Check Text" column indicates that both
OVAL and XCCDF have been tested; a note with the testers'
names/initials are displayed at the bottom of the associated cell.
How check attestations are added to the project are covered in
previous discussions on the list (and hopefully apparent at a glance
in the corresponding input file).
Nice, thanks!
The number of tested checks could increase significantly (momentum!),
if some of the templated ones are tested (which would then likely
involve adding a tag to the template, at least for the OVAL).
Just submitted a few patches against the OVAL templates.... hope to do
more in the coming days.
Relatedly, I seem to recall that one of the templated OVAL checks may
not quite be right, such as enabling/disabling a service for all
runlevels instead of the usual 2-5.
Correct... that one will need both the OVAL and
bash updated. I'll take
this one over the weekend (unless someone can beat me to it!).