[PATCH] Commented out unreferenced check/value.

Michael Palmiotto mpalmiotto at tresys.com
Mon Jul 16 16:35:29 UTC 2012


---
 RHEL6/input/profiles/common.xml |    8 ++++++--
 1 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/profiles/common.xml b/RHEL6/input/profiles/common.xml
index 1b188da..5a97392 100644
--- a/RHEL6/input/profiles/common.xml
+++ b/RHEL6/input/profiles/common.xml
@@ -59,7 +59,9 @@
 <select idref="set_sysctl_net_ipv4_conf_default_accept_source_route" selected="true"/>
 <select idref="set_sysctl_net_ipv4_conf_default_secure_redirects" selected="true"/>
 <select idref="set_sysctl_net_ipv4_icmp_echo_ignore_broadcasts" selected="true"/>
-<select idref="set_sysctl_net_ipv4_icmp_ignore_bogus_error_messages" selected="true"/>
+<!-- Check not referenced in any Rule 
+     <select idref="set_sysctl_net_ipv4_icmp_ignore_bogus_error_messages" selected="true"/>
+-->
 <select idref="set_sysctl_net_ipv4_tcp_syncookies" selected="true"/>
 <select idref="set_sysctl_net_ipv4_conf_all_rp_filter" selected="true"/>
 <select idref="set_sysctl_net_ipv4_conf_default_rp_filter" selected="true"/>
@@ -223,7 +225,9 @@ these should likely be moved out of common.
 <!-- net.ipv4.conf.default.secure_redirects -->
 <refine-value idref="sysctl_net_ipv4_icmp_echo_ignore_broadcasts_value" selector="enabled"/>
 <!-- net.ipv4.icmp_echo_ignore_broadcast -->
-<refine-value idref="sysctl_net_ipv4_icmp_ignore_bogus_error_messages_value" selector="enabled"/>
+<!-- Value not referenced in any Rules
+	<refine-value idref="sysctl_net_ipv4_icmp_ignore_bogus_error_messages_value" selector="enabled"/>
+-->
 <!-- net.ipv4.icmp_ignore_bogus_error_messages -->
 <refine-value idref="sysctl_net_ipv4_tcp_syncookies_value" selector="enabled"/>
 <!-- net.ipv4.tcp_syncookie -->
-- 
1.7.1



More information about the scap-security-guide mailing list