1) This proposal includes the necessary directory structure /
transform scripts, so remediation scripts could work for Fedora
content too,
2) Since there (in RHEL6 content) are currently multiple remediation
fixes of the form "search for text file pattern. Replace old value
based on provided variable if found or append new value if not found":
- accounts_maximum_age_login_defs.sh
- accounts_minimum_age_login_defs.sh
..
- accounts_umask_login_defs.sh
..
- sshd_set_idle_timeout.sh (16 of this type in total right now),
wrote 'replace or append pattern value in text file' remediation
script generator (create_replace_or_append_pattern_value_in_text_file.sh),
which can be used, when new remediation scripts of this type are needed.
3) Based on that script created remediation script for
"Set password minimum length in login.defs" rule.
Please review.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
Show replies by thread