This patch adds particular XCCDF entry (to appropriate places) to
start using existing package_talk-server_removed.xml OVAL check
in RHEL-6 & RHEL-7. Update also test attestations for both systems &
moved the check to shared.
The corresponding OVAL check & XCCDF definition for 'package talk
removed' case will follow in separate patch.
Rationale: While none of talk-server / talk packages are installed
nowadays by default on RHEL-6 / RHEL-7, there still might be instances,
where these will get installed later, and during the scan of such a
system the administrator should be notified talk services are considered
outdated & insecure.
Testing status:
Change has been tested on both (RHEL-6, RHEL-7) returning expected results.
Also checked particular entry is created in *-guide.html version of both
(RHEL-6, RHEL-7) benchmarks.
Please review.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
Show replies by date