Added support for Values, tested checks, updated Rules.
Jeffrey Blank (3):
significant overhaul and QA of auditing section
updates to Profiles to support auditing Rules * also removal of
some Rules which don't belong in common Profile
significant overhaul of OVAL checks for auditing * support for
Values * consistent naming (which may yet be made more concise
in the future) * actually tested the checks
.../auditd_data_retention_action_mail_acct.xml | 36 ++
.../auditd_data_retention_admin_space_left.xml | 30 --
...ditd_data_retention_admin_space_left_action.xml | 36 ++
.../checks/auditd_data_retention_mail_acct.xml | 30 --
.../input/checks/auditd_data_retention_max_log.xml | 30 --
.../checks/auditd_data_retention_max_log_file.xml | 28 +-
.../auditd_data_retention_max_log_file_action.xml | 36 ++
.../checks/auditd_data_retention_num_logs.xml | 36 ++
.../checks/auditd_data_retention_space_left.xml | 30 --
.../auditd_data_retention_space_left_action.xml | 36 ++
rhel6/src/input/profiles/common.xml | 22 +-
rhel6/src/input/profiles/test.xml | 20 +-
rhel6/src/input/system/auditing.xml | 362 ++++++++++++++------
13 files changed, 494 insertions(+), 238 deletions(-)
create mode 100644 rhel6/src/input/checks/auditd_data_retention_action_mail_acct.xml
delete mode 100644 rhel6/src/input/checks/auditd_data_retention_admin_space_left.xml
create mode 100644
rhel6/src/input/checks/auditd_data_retention_admin_space_left_action.xml
delete mode 100644 rhel6/src/input/checks/auditd_data_retention_mail_acct.xml
delete mode 100644 rhel6/src/input/checks/auditd_data_retention_max_log.xml
create mode 100644 rhel6/src/input/checks/auditd_data_retention_max_log_file_action.xml
create mode 100644 rhel6/src/input/checks/auditd_data_retention_num_logs.xml
delete mode 100644 rhel6/src/input/checks/auditd_data_retention_space_left.xml
create mode 100644 rhel6/src/input/checks/auditd_data_retention_space_left_action.xml
Show replies by date