[PATCH 3/4] added missing items to Profiles

Jeffrey Blank blank at eclipse.ncsc.mil
Mon Jul 30 15:10:48 UTC 2012


Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
 RHEL6/input/profiles/STIG-server.xml |    4 ++++
 RHEL6/input/profiles/common.xml      |   17 +++++++++++++++++
 2 files changed, 21 insertions(+), 0 deletions(-)

diff --git a/RHEL6/input/profiles/STIG-server.xml b/RHEL6/input/profiles/STIG-server.xml
index 5c62da8..55bb934 100644
--- a/RHEL6/input/profiles/STIG-server.xml
+++ b/RHEL6/input/profiles/STIG-server.xml
@@ -6,8 +6,12 @@
 <select idref="packagegroup_xwindows_remove" selected="true"/>
 <select idref="disable_dhcp_client" selected="true"/>
 <select idref="limiting_password_reuse" selected="true"/>
+<select idref="no_files_unowned_by_user" selected="true"/>
+<select idref="aide_periodic_cron_checking" selected="true"/>
+<select idref="disable_users_coredumps" selected="true"/>
 
 <!-- Password history -->
 <refine-value idref="password_history_retain_number" selector="5"/>
 
+<refine-value idref="var_password_max_age" selector="60"/>
 </Profile>
diff --git a/RHEL6/input/profiles/common.xml b/RHEL6/input/profiles/common.xml
index ba42601..6d77abc 100644
--- a/RHEL6/input/profiles/common.xml
+++ b/RHEL6/input/profiles/common.xml
@@ -24,6 +24,18 @@
 <select idref="no_empty_passwords" selected="true"/>
 <select idref="no_hashes_outside_shadow" selected="true"/>
 <select idref="no_uidzero_except_root" selected="true"/>
+
+<select idref="userowner_shadow_file" selected="true"/>
+<select idref="groupowner_shadow_file" selected="true"/>
+<select idref="perms_shadow_file" selected="true"/>
+
+<select idref="userowner_gshadow_file" selected="true"/>
+<select idref="groupowner_gshadow_file" selected="true"/>
+<select idref="perms_gshadow_file" selected="true"/>
+
+<select idref="userowner_passwd_file" selected="true"/>
+<select idref="groupowner_passwd_file" selected="true"/>
+<select idref="file_permissions_etc_passwd" selected="true"/>
 <select idref="password_min_len" selected="true"/>
 <select idref="password_min_age" selected="true"/>
 <select idref="password_max_age" selected="true"/>
@@ -48,6 +60,10 @@
 <select idref="install_vlock_package" selected="true"/>
 <select idref="set_system_login_banner" selected="true"/>
 <!-- CURRENTLY NOT IMPLEMENTED <select idref="set_gui_login_banner" selected="true"/> -->
+
+<select idref="enable_randomize_va_space" selected="true"/>
+<select idref="enable_execshield" selected="true"/>
+
 <select idref="disable_sysctl_ipv4_default_send_redirects" selected="true"/>
 <select idref="disable_sysctl_ipv4_all_send_redirects" selected="true"/>
 <select idref="disable_sysctl_ipv4_ip_forward" selected="true"/>
@@ -111,6 +127,7 @@
 <select idref="disable_telnet_service" selected="true"/>
 <select idref="uninstall_rsh-server" selected="true"/>
 <select idref="disable_rsh" selected="true"/>
+<select idref="disable_rexec" selected="true"/>
 <select idref="disable_rlogin" selected="true"/>
 <select idref="uninstall_ypserv" selected="true"/>
 <select idref="disable_ypbind" selected="true"/>
-- 
1.7.1



More information about the scap-security-guide mailing list