[PATCH] DISA FSO requested updates to RHEL6/input/system/selinux.xml

Shawn Wells shawn.d.wells at gmail.com
Tue Dec 4 00:13:43 UTC 2012


-------------- next part --------------
>From 0572166a383b68ad56ef5234d0e859de8dc7af87 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Mon, 3 Dec 2012 19:12:30 -0500
Subject: [PATCH] DISA FSO requested updates to RHEL6/input/system/selinux.xml
 DISA FSO requested updates to RHEL6/input/system/selinux.xml
 Closing ticket https://fedorahosted.org/scap-security-guide/ticket/160

---
 RHEL6/input/system/selinux.xml |    7 +++----
 1 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/RHEL6/input/system/selinux.xml b/RHEL6/input/system/selinux.xml
index 58c4c5c..f46d2c2 100644
--- a/RHEL6/input/system/selinux.xml
+++ b/RHEL6/input/system/selinux.xml
@@ -117,7 +117,7 @@ Check the file <tt>/etc/selinux/config</tt> and ensure the following line appear
 <pre>SELINUX=enforcing</pre>
 </ocil>
 <rationale>
-Setting the SELinux state to enforcing ensures that SELinux is able to confine
+Setting the SELinux state to enforcing ensures SELinux is able to confine
 potentially compromised processes to the security policy, which is designed to
 prevent them from causing damage to the system or further elevating their
 privileges.
@@ -145,7 +145,7 @@ Check the file <tt>/etc/selinux/config</tt> and ensure the following line appear
 </ocil>
 <rationale>
 Setting the SELinux policy to <tt>targeted</tt> or a more specialized policy
-ensures that the system will confine processes that are likely to be
+ensures the system will confine processes that are likely to be
 targeted for exploitation, such as network or system services.
 </rationale>
 <ident cce="3624-4" />
@@ -155,13 +155,12 @@ targeted for exploitation, such as network or system services.
 </Rule>
 </Group>
 
-
 <Rule id="service_restorecond_enabled">
 <title>Enable the SELinux Context Restoration Service (restorecond)</title>
 <description>The <tt>restorecond</tt> service utilizes <tt>inotify</tt> to look
 for the creation of new files listed in the
 <tt>/etc/selinux/restorecond.conf</tt> configuration file. When a file is
-created, <tt>restorecond</tt> ensures that the file receives the proper SELinux
+created, <tt>restorecond</tt> ensures the file receives the proper SELinux
 security context.
 <service-enable-macro service="restorecond" />
 </description>
-- 
1.7.1



More information about the scap-security-guide mailing list