On 11/16/12 5:54 PM, Shawn Wells wrote:

0003-DISA-FSO-Copy-editing-of-Avahi-section.patch

From 2a61a559641866602df30eb638f31ae0b149b87e Mon Sep 17 00:00:00 2001 From: Shawn Wellsshawn@redhat.com Date: Fri, 16 Nov 2012 06:55:58 -0500 Subject: [PATCH 03/13] DISA FSO: Copy editing of Avahi section DISA FSO provided copy editing of the Avahi section

---

RHEL6/input/services/avahi.xml | 12 ++++++------ 1 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/RHEL6/input/services/avahi.xml b/RHEL6/input/services/avahi.xml index c4112b7..af7dd1c 100644 --- a/RHEL6/input/services/avahi.xml +++ b/RHEL6/input/services/avahi.xml @@ -50,9 +50,9 @@http://www.avahi.org for more detailed information about the configuration optio

<title>Serve Avahi Only via Required Protocol</title> <description> If you are using only IPv4, edit <tt>/etc/avahi/avahi-daemon.conf</tt> and ensure -the following line exists in the <tt>[server]</tt> section: +the following line exists in the <tt>[server]</tt> section. <pre>use-ipv6=no</pre> -Similarly, if you are using only IPv6, disable IPv4 sockets with the line: +Similarly, if you are using only IPv6, disable IPv4 sockets with the line. <pre>use-ipv4=no</pre> </description> <ref nist="CM-6, CM-7" /> @@ -83,7 +83,7 @@ are not permitted. <title>Prevent Other Programs from Using Avahi's Port</title> <description> To prevent other mDNS stacks from running, edit <tt>/etc/avahi/avahi-daemon.conf</tt> -and ensure the following line appears in the <tt>[server]</tt> section: +and ensure the following line appears in the <tt>[server]</tt> section. <pre>disallow-other-stacks=yes</pre> </description> <rationale> @@ -98,7 +98,7 @@ that port on the system. <title>Disable Avahi Publishing</title> <description> To prevent other mDNS stacks from running, edit <tt>/etc/avahi/avahi-daemon.conf</tt> -and ensure the following line appears in the <tt>[server]</tt> section: +and ensure the following line appears in the <tt>[server]</tt> section. <pre>disallow-other-stacks=yes</pre> </description> <rationale> @@ -116,10 +116,10 @@ If it is necessary to publish some information to the network, it should not be by any extraneous information, or by information supplied by a non-trusted source on the system. Prevent user applications from using Avahi to publish services by adding or -correcting the following line in the <tt>[publish]</tt> section: +correcting the following line in the <tt>[publish]</tt> section. <pre>disable-user-service-publishing=yes</pre> Implement as many of the following lines as possible, to restrict the information -published by Avahi: +published by Avahi. <pre>publish-addresses=no publish-hinfo=no publish-workstation=no -- 1.7.1

Ack

(note these patches were created by FSO, not myself. I only posted publicly.)