[PATCH v2] M1 Incomplete Guidance - Proxy

Michael Palmiotto mpalmiotto at tresys.com
Fri Apr 27 15:51:14 UTC 2012


I'd like to push to the repo.  Is this patch ACK-worthy? 
________________________________________
From: scap-security-guide-bounces at lists.fedorahosted.org [scap-security-guide-bounces at lists.fedorahosted.org] on behalf of Michael Palmiotto [mpalmiotto at tresys.com]
Sent: Friday, April 27, 2012 9:12 AM
To: scap-security-guide at lists.fedorahosted.org
Subject: [PATCH v2] M1 Incomplete Guidance - Proxy

Prose and OVAL checks for Proxy.

Michael Palmiotto (1):
  M1 Incomplete Guidance - Proxy

 .../service_squid_acls_configured_filemaker.xml    |   40 ++
 .../checks/service_squid_acls_configured_ftp.xml   |   40 ++
 .../service_squid_acls_configured_gopher.xml       |   40 ++
 .../service_squid_acls_configured_gss_http.xml     |   40 ++
 .../service_squid_acls_configured_http-mgmt.xml    |   40 ++
 .../checks/service_squid_acls_configured_http.xml  |   40 ++
 .../checks/service_squid_acls_configured_https.xml |   40 ++
 .../service_squid_acls_configured_localhost.xml    |   30 ++
 .../service_squid_acls_configured_multiling.xml    |   40 ++
 .../checks/service_squid_acls_configured_wais.xml  |   40 ++
 .../service_squid_authentication_configured.xml    |   30 ++
 ...ervice_squid_default_insecure_forwarded_for.xml |   30 ++
 .../service_squid_default_insecure_log_mime.xml    |   30 ++
 ...id_default_insecure_suppress_version_string.xml |   30 ++
 .../service_squid_default_insecure_underscore.xml  |   30 ++
 .../input/checks/service_squid_logs_forwarded.xml  |   30 ++
 .../checks/service_squid_privileges_lowered.xml    |   70 +++
 .../checks/squid_default_secure_cache_group.xml    |   30 ++
 .../checks/squid_default_secure_cache_user.xml     |   30 ++
 .../checks/squid_default_secure_hostnames.xml      |   30 ++
 .../input/checks/squid_default_secure_passive.xml  |   30 ++
 .../checks/squid_default_secure_reply_header.xml   |   30 ++
 .../checks/squid_default_secure_request_header.xml |   30 ++
 .../input/checks/squid_default_secure_sanity.xml   |   30 ++
 .../squid_default_secured_ignore_unknown.xml       |   30 ++
 .../input/checks/system_proxy_access_allowed.xml   |   30 ++
 rhel6/src/input/profiles/common.xml                |   39 ++-
 rhel6/src/input/services/squid.xml                 |  536 ++++++++++++++++++++
 28 files changed, 1476 insertions(+), 9 deletions(-)
 create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_filemaker.xml
 create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_ftp.xml
 create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_gopher.xml
 create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_gss_http.xml
 create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_http-mgmt.xml
 create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_http.xml
 create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_https.xml
 create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_localhost.xml
 create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_multiling.xml
 create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_wais.xml
 create mode 100644 rhel6/src/input/checks/service_squid_authentication_configured.xml
 create mode 100644 rhel6/src/input/checks/service_squid_default_insecure_forwarded_for.xml
 create mode 100644 rhel6/src/input/checks/service_squid_default_insecure_log_mime.xml
 create mode 100644 rhel6/src/input/checks/service_squid_default_insecure_suppress_version_string.xml
 create mode 100644 rhel6/src/input/checks/service_squid_default_insecure_underscore.xml
 create mode 100644 rhel6/src/input/checks/service_squid_logs_forwarded.xml
 create mode 100644 rhel6/src/input/checks/service_squid_privileges_lowered.xml
 create mode 100644 rhel6/src/input/checks/squid_default_secure_cache_group.xml
 create mode 100644 rhel6/src/input/checks/squid_default_secure_cache_user.xml
 create mode 100644 rhel6/src/input/checks/squid_default_secure_hostnames.xml
 create mode 100644 rhel6/src/input/checks/squid_default_secure_passive.xml
 create mode 100644 rhel6/src/input/checks/squid_default_secure_reply_header.xml
 create mode 100644 rhel6/src/input/checks/squid_default_secure_request_header.xml
 create mode 100644 rhel6/src/input/checks/squid_default_secure_sanity.xml
 create mode 100644 rhel6/src/input/checks/squid_default_secured_ignore_unknown.xml
 create mode 100644 rhel6/src/input/checks/system_proxy_access_allowed.xml

--
1.7.6.5

_______________________________________________
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/scap-security-guide


More information about the scap-security-guide mailing list