On 9/27/13 5:38 PM, Tony James wrote:
0001-OVAL-signoff-on-service_rhnsd_disabled.xml.patch
From 7c449cf51e09694274e596b5d46c790000cabaf7 Mon Sep 17 00:00:00 2001 From: Tony Jamestony@redhat.com Date: Fri, 27 Sep 2013 17:23:56 -0400 Subject: [PATCH] OVAL signoff on service_rhnsd_disabled.xml
[tony@rhel6 checks]$ ./testcheck.py service_rhnsd_disabled.xml Evaluating with OVAL tempfile : /tmp/service_rhnsd_disabled4jfbEx.xml Writing results to : /tmp/service_rhnsd_disabled4jfbEx.xml-results Definition oval:scap-security-guide.testing:def:101: false Definition oval:scap-security-guide.testing:def:100: false Evaluation done. [tony@rhel6 checks]$ chkconfig rhnsd off You do not have enough privileges to perform this operation. [tony@rhel6 checks]$ sudo chkconfig rhnsd off [tony@rhel6 checks]$ ./testcheck.py service_rhnsd_disabled.xml Evaluating with OVAL tempfile : /tmp/service_rhnsd_disabledbWy4lJ.xml Writing results to : /tmp/service_rhnsd_disabledbWy4lJ.xml-results Definition oval:scap-security-guide.testing:def:101: false Definition oval:scap-security-guide.testing:def:100: true Evaluation done. [tony@rhel6 checks]$ sudo service rhnsd stop Stopping Red Hat Network Daemon: [ OK ] [tony@rhel6 checks]$ ./testcheck.py service_rhnsd_disabled.xml Evaluating with OVAL tempfile : /tmp/service_rhnsd_disabledrq9CRE.xml Writing results to : /tmp/service_rhnsd_disabledrq9CRE.xml-results Definition oval:scap-security-guide.testing:def:101: false Definition oval:scap-security-guide.testing:def:100: true Evaluation done.
RHEL6/input/checks/service_rhnsd_disabled.xml | 1 + 1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/RHEL6/input/checks/service_rhnsd_disabled.xml b/RHEL6/input/checks/service_rhnsd_disabled.xml index ff0779f..240ed80 100644 --- a/RHEL6/input/checks/service_rhnsd_disabled.xml +++ b/RHEL6/input/checks/service_rhnsd_disabled.xml @@ -8,6 +8,7 @@ <platform>Red Hat Enterprise Linux 6</platform> </affected> <description>The rhnsd service should be disabled if possible.</description>
<reference source="tony" ref_id="20130927" ref_url="test_attestation"/> </metadata>
<criteria comment="package rhnsd removed or service rhnsd is not configured to start" operator="OR"> <extend_definition comment="rhnsd removed" definition_ref="package_rhnsd_removed" />
-- 1.7.1
finally getting off your rear and becoming a commiter, eh? ;) welcome!
ack
scap-security-guide@lists.fedorahosted.org