[PATCH 0/4] additions to Profiles for STIG-server and common

Jeffrey Blank blank at eclipse.ncsc.mil
Mon Jul 30 23:02:08 UTC 2012


* trying to ensure that if a Rule is denoted as satisfying a CCI, that it is included in the STIG-server profile

Jeffrey Blank (4):
  added new Value for remembering 24 passwords      * which increases
    number of hashes that can be harvested at any one time      * and
    is apparently also some kind of policy requirement
  added DoD banner (with minor changes) from RHEL 5 STIG
  added Rules to the common and STIG-server Profiles to make them more
    complete      * driven by addition of CCI references to Rules
    identified by verify-references.py
  deprecating Rules which call for deletion of kernel modules in favor
    of disabling them

 RHEL6/input/profiles/STIG-server.xml        |   26 ++++++++++++++++++++++++--
 RHEL6/input/profiles/common.xml             |   17 +++++++++++++++++
 RHEL6/input/system/accounts/banners.xml     |    7 +++++++
 RHEL6/input/system/accounts/pam.xml         |    6 +++++-
 RHEL6/input/system/network/wireless.xml     |    4 ++--
 RHEL6/input/system/permissions/mounting.xml |    4 +++-
 6 files changed, 58 insertions(+), 6 deletions(-)



More information about the scap-security-guide mailing list