[PATCH 1/2] added umask Rules to STIG profile, test profile * OVAL seems broken
Shawn Wells
shawn at redhat.com
Thu Aug 16 23:41:01 UTC 2012
On 8/16/12 6:25 PM, Jeffrey Blank wrote:
> Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
> ---
> RHEL6/input/profiles/STIG-server.xml | 11 +++++++++++
> RHEL6/input/profiles/test.xml | 11 +++++++++++
> 2 files changed, 22 insertions(+), 0 deletions(-)
>
> diff --git a/RHEL6/input/profiles/STIG-server.xml b/RHEL6/input/profiles/STIG-server.xml
> index 7fa7df7..e669b3f 100644
> --- a/RHEL6/input/profiles/STIG-server.xml
> +++ b/RHEL6/input/profiles/STIG-server.xml
> @@ -35,6 +35,17 @@
> <select idref="tftpd_uses_secure_mode" selected="true" />
>
>
> +<select idref="user_umask_bashrc" selected="true" />
> +<select idref="user_umask_cshrc" selected="true" />
> +<select idref="user_umask_profile" selected="true" />
> +<select idref="user_umask_logindefs" selected="true" />
> +<refine-value idref="user_umask_value" selector="077"/>
> +
> +
> +<select idref="daemon_umask" selected="true" />
> +<refine-value idref="var_umask_for_daemons" selector="027"/>
> +
> +
> <select idref="no_netrc_files" selected="true" />
>
> <select idref="ftp_present_banner" selected="true" />
> diff --git a/RHEL6/input/profiles/test.xml b/RHEL6/input/profiles/test.xml
> index 8d3761a..9f0bd50 100644
> --- a/RHEL6/input/profiles/test.xml
> +++ b/RHEL6/input/profiles/test.xml
> @@ -45,6 +45,17 @@
> <refine-value idref="var_auditd_action_mail_acct" selector="root"/>
>
>
> +<select idref="user_umask_bashrc" selected="true" />
> +<select idref="user_umask_cshrc" selected="true" />
> +<select idref="user_umask_profile" selected="true" />
> +<select idref="user_umask_logindefs" selected="true" />
> +<refine-value idref="user_umask_value" selector="077"/>
> +
> +
> +<select idref="daemon_umask" selected="true" />
> +<refine-value idref="var_umask_for_daemons" selector="027"/>
> +
> +
>
> <refine-value idref="var_password_min_len" selector="12"/>
> <!-- password minimum length -->
Ack
More information about the scap-security-guide
mailing list