On 11/16/12 5:54 PM, Shawn Wells wrote:
0003-DISA-FSO-Copy-editing-of-Avahi-section.patch
From 2a61a559641866602df30eb638f31ae0b149b87e Mon Sep 17 00:00:00 2001
From: Shawn Wells<shawn(a)redhat.com>
Date: Fri, 16 Nov 2012 06:55:58 -0500
Subject: [PATCH 03/13] DISA FSO: Copy editing of Avahi section
DISA FSO provided copy editing of the Avahi section
---
RHEL6/input/services/avahi.xml | 12 ++++++------
1 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/RHEL6/input/services/avahi.xml b/RHEL6/input/services/avahi.xml
index c4112b7..af7dd1c 100644
--- a/RHEL6/input/services/avahi.xml
+++ b/RHEL6/input/services/avahi.xml
@@ -50,9 +50,9 @@http://www.avahi.org for more detailed information about the
configuration optio
<title>Serve Avahi Only via Required Protocol</title>
<description>
If you are using only IPv4, edit <tt>/etc/avahi/avahi-daemon.conf</tt> and
ensure
-the following line exists in the <tt>[server]</tt> section:
+the following line exists in the <tt>[server]</tt> section.
<pre>use-ipv6=no</pre>
-Similarly, if you are using only IPv6, disable IPv4 sockets with the line:
+Similarly, if you are using only IPv6, disable IPv4 sockets with the line.
<pre>use-ipv4=no</pre>
</description>
<ref nist="CM-6, CM-7" />
@@ -83,7 +83,7 @@ are not permitted.
<title>Prevent Other Programs from Using Avahi's Port</title>
<description>
To prevent other mDNS stacks from running, edit
<tt>/etc/avahi/avahi-daemon.conf</tt>
-and ensure the following line appears in the <tt>[server]</tt> section:
+and ensure the following line appears in the <tt>[server]</tt> section.
<pre>disallow-other-stacks=yes</pre>
</description>
<rationale>
@@ -98,7 +98,7 @@ that port on the system.
<title>Disable Avahi Publishing</title>
<description>
To prevent other mDNS stacks from running, edit
<tt>/etc/avahi/avahi-daemon.conf</tt>
-and ensure the following line appears in the <tt>[server]</tt> section:
+and ensure the following line appears in the <tt>[server]</tt> section.
<pre>disallow-other-stacks=yes</pre>
</description>
<rationale>
@@ -116,10 +116,10 @@ If it is necessary to publish some information to the network, it
should not be
by any extraneous information, or by information supplied by a non-trusted source
on the system.
Prevent user applications from using Avahi to publish services by adding or
-correcting the following line in the <tt>[publish]</tt> section:
+correcting the following line in the <tt>[publish]</tt> section.
<pre>disable-user-service-publishing=yes</pre>
Implement as many of the following lines as possible, to restrict the information
-published by Avahi:
+published by Avahi.
<pre>publish-addresses=no
publish-hinfo=no
publish-workstation=no
-- 1.7.1
Ack
(note these patches were created by FSO, not myself. I only posted
publicly.)