July 2012 Archives by subject
Starting: Mon Jul 2 21:18:16 UTC 2012
Ending: Tue Jul 31 21:19:33 UTC 2012
Messages: 464
- "This element is not expected." running oscap
Willem Bos
- "This element is not expected." running oscap
Willem Bos
- "This element is not expected." running oscap
Kevin Spargur
- "This element is not expected." running oscap
Willem Bos
- "This element is not expected." running oscap
Kevin Spargur
- "This element is not expected." running oscap
Willem Bos
- "This element is not expected." running oscap
Willem Bos
- [PATCH 0/1] Rule and checks for disabling qpidd per ticket 50
Kevin Spargur
- [PATCH 0/2] making sure anything with a CCI ref is in the STIG profile
Shawn Wells
- [PATCH 0/2] making sure anything with a CCI ref is in the STIG profile
Jeffrey Blank
- [PATCH 0/2] Mapped CCI1343 and fixed group/rule
Kevin Spargur
- [PATCH 0/2] Mapped CCI1343 and fixed group/rule
Willy Santos
- [PATCH 0/2] support for listing STIG Rules in tables
Jeffrey Blank
- [PATCH 0/2] support for listing STIG Rules in tables
Shawn Wells
- [PATCH 0/2] Updated singleuser pw check and a profile id
Kevin Spargur
- [PATCH 0/2] Updated singleuser pw check and a profile id
Willy Santos
- [PATCH 0/2] Updated singleuser pw check and a profile id
Shawn Wells
- [PATCH 0/3] Added prose about CAC cards
Willy Santos
- [PATCH 0/3] Cleaned up some make validate errors and mapped some CCI's
Shawn Wells
- [PATCH 0/3] Cleaned up some make validate errors and mapped some CCI's
Jeffrey Blank
- [PATCH 0/3] Cleaned up some make validate errors and mapped some CCI's
Kevin Spargur
- [PATCH 0/3] New prose about using LUKS.
Willy Santos
- [PATCH 0/3] New prose about using LUKS.
Shawn Wells
- [PATCH 0/4] Added content based on DISA FSO feedback.
Willy Santos
- [PATCH 0/4] additions to Profiles for STIG-server and common
Jeffrey Blank
- [PATCH 0/4] additions to Profiles for STIG-server and common
Maura Dailey
- [PATCH 0/4] notes toward consensus, additions from RHEL 5 STIG
Jeffrey Blank
- [PATCH 0/4] notes toward consensus, additions from RHEL 5 STIG
Willy Santos
- [PATCH 0/4] notes toward consensus, additions from RHEL 5 STIG
Jeffrey Blank
- [PATCH 0/4] Updated CCI Mappings
Willy Santos
- [PATCH 0/4] Updated CCI Mappings
Shawn Wells
- [PATCH 0/5] Changes based on feedback from DISA FSO.
Willy Santos
- [PATCH 0/5] Changes based on feedback from DISA FSO.
Shawn Wells
- [PATCH 0/5] Various additions
Willy Santos
- [PATCH 0/5] Various additions
Jeffrey Blank
- [PATCH 00/11] CCI Mapping changes based on list input
Willy Santos
- [PATCH 00/11] CCI Mapping changes based on list input
Shawn Wells
- [PATCH 00/11] CCI Mapping changes based on list input
Jeffrey Blank
- [PATCH 00/12] CCI Remaps based on list input.
Willy Santos
- [PATCH 00/12] CCI Remaps based on list input.
ctrueman at redhat.com
- [PATCH 00/21] More CCI Mappings
Willy Santos
- [PATCH 00/25] More CCI Mappings
Willy Santos
- [PATCH 00/25] More CCI Mappings
Shawn Wells
- [PATCH 00/33] More CCI Mappings
Willy Santos
- [PATCH 00/33] More CCI Mappings
Shawn Wells
- [PATCH 00/33] More CCI Mappings
ctrueman at redhat.com
- [PATCH 00/37] More CCI mappings
Willy Santos
- [PATCH 00/37] More CCI mappings
Shawn Wells
- [PATCH 01/11] Changed mapping of CCI-000099 from requirement_unclear to met_inherently based on recommendation from Shawn Wells.
Willy Santos
- [PATCH 01/11] Mapped all SRG-OS-NA to unmet_impractical_guidance
Shawn Wells
- [PATCH 01/11] Mapped all SRG-OS-NA to unmet_impractical_guidance
Shawn Wells
- [PATCH 01/11] Mapped all SRG-OS-NA to unmet_impractical_guidance
Willy Santos
- [PATCH 01/11] Mapped all SRG-OS-NA to unmet_impractical_guidance
Jeffrey Blank
- [PATCH 01/12] Remapped CCI-001159 from requirement_unclear to new_rule_needed, based on input from Shawn Wells.
Willy Santos
- [PATCH 01/16] Mapped sshd_enable_warning_banner to CCI-000048
Shawn Wells
- [PATCH 01/16] Mapped sshd_enable_warning_banner to CCI-000048
Shawn Wells
- [PATCH 01/16] Mapped sshd_enable_warning_banner to CCI-000048
Willy Santos
- [PATCH 01/21] Remapped CCIs 764 and 804 from unmet_impractical_guidance to met_inherently. Based on input from Shawn Wells and input from Jeff Blank it was concluded that the use of unique identifiers (UIDs) for all users (org or non-org) meets this requirement.
Shawn Wells
- [PATCH 01/21] Remapped CCIs 764 and 804 from unmet_impractical_guidance to met_inherently. Based on input from Shawn Wells and input from Jeff Blank it was concluded that the use of unique identifiers (UIDs) for all users (org or non-org) meets this requirement.
Willy Santos
- [PATCH 01/25] Mapped CCI-000770 to new_rule_needed.
Willy Santos
- [PATCH 01/33] Mapped CCI-001209 to met_inherently.
Willy Santos
- [PATCH 01/37] Fixed missing mapping of CCI-001311.
Willy Santos
- [PATCH 02/11] Added mapping of CCI-000085 to auditd_configure_rules based on guidance from Shawn Wells.
Willy Santos
- [PATCH 02/11] Updated prose for no_uidzero_except_root & added CCI mapping
Willy Santos
- [PATCH 02/11] Updated prose for no_uidzero_except_root & added CCI mapping
Shawn Wells
- [PATCH 02/11] Updated prose for no_uidzero_except_root & added CCI mapping
Shawn Wells
- [PATCH 02/12] Remapped CCI-001125 from requirement_unclear to new_rule_needed, based on input from Shawn Wells.
Willy Santos
- [PATCH 02/16] Mapped ftp_present_banner to CCI-000048
Shawn Wells
- [PATCH 02/16] Mapped ftp_present_banner to CCI-000048
Shawn Wells
- [PATCH 02/16] Mapped ftp_present_banner to CCI-000048
Willy Santos
- [PATCH 02/16] Mapped ftp_present_banner to CCI-000048
Shawn Wells
- [PATCH 02/21] Mapped CCI-001159 to requirement unclear.
Willy Santos
- [PATCH 02/21] Mapped CCI-001159 to requirement unclear.
Shawn Wells
- [PATCH 02/25] Mapped CCI-001083 to met_inherently.
Willy Santos
- [PATCH 02/33] Mapped CCI-001210 to unmet_impractical_guidance.
Willy Santos
- [PATCH 02/37] Remapped CCI-001328 to met_inherently, based on input from Shawn Wells.
Willy Santos
- [PATCH 03/11] Prose updates to rsyslog_file_permissions, mapped to CCI-001314
Willy Santos
- [PATCH 03/11] Prose updates to rsyslog_file_permissions, mapped to CCI-001314
Shawn Wells
- [PATCH 03/11] Prose updates to rsyslog_file_permissions, mapped to CCI-001314
Shawn Wells
- [PATCH 03/11] Remapped CCI-000025 from requirement_unclear to unmet_impractical_guidance, based on input from Shawn Wells.
Willy Santos
- [PATCH 03/12] Remapped CCI-001126 from requirement_unclear to unmet_impractical_product, based on input from Shawn Wells.
Willy Santos
- [PATCH 03/16] Mapped set_screensaver_inactivity_timeout and enable_screensaver_password_lock to CCI-000057
Shawn Wells
- [PATCH 03/16] Mapped set_screensaver_inactivity_timeout and enable_screensaver_password_lock to CCI-000057
Willy Santos
- [PATCH 03/16] Mapped set_screensaver_inactivity_timeout and enable_screensaver_password_lock to CCI-000057 Added mappings to CCI-000057 to directly associate the gconf settings
Shawn Wells
- [PATCH 03/21] Mapped CCI-001125 to requirement_unclear.
Willy Santos
- [PATCH 03/21] Mapped CCI-001125 to requirement_unclear.
Shawn Wells
- [PATCH 03/25] Mapped CCI-001089 to met_inherently.
Willy Santos
- [PATCH 03/33] Mapped CCI-001211 to unmet_impractical_guidance.
Willy Santos
- [PATCH 03/37] Remapped CCI-001340 to unmet_impractical_guidance, based on input from Shawn Wells.
Willy Santos
- [PATCH 04/11] Remapped CCI-000026 from requirement_unclear to enabling_selinux, based on input from Shawn Wells.
Willy Santos
- [PATCH 04/11] Updated prose of userowner_shadow_file, mapped to CCI-000225
Willy Santos
- [PATCH 04/11] Updated prose of userowner_shadow_file, mapped to CCI-000225
Shawn Wells
- [PATCH 04/11] Updated prose of userowner_shadow_file, mapped to CCI-000225 Updated language to match that of RHEL5 STIG, mapped to CCI-000225
Shawn Wells
- [PATCH 04/12] Remapped CCI-001140 from requirement_unclear to new_rule_needed, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 04/16] Mapped CCI-000060 to set_blank_screensaver
Shawn Wells
- [PATCH 04/16] Mapped CCI-000060 to set_blank_screensaver
Willy Santos
- [PATCH 04/16] Mapped CCI-000060 to set_blank_screensaver 60 requires a "publicaly viewable pattern" be placed on the screen during locks. set_blank_screensaver addresses this by blanking out the screen
Shawn Wells
- [PATCH 04/21] Mapped CCI-001126 to requirement_unclear.
Willy Santos
- [PATCH 04/21] Mapped CCI-001126 to requirement_unclear.
Shawn Wells
- [PATCH 04/25] Mapped CCI-000804 to unmet_impractical_guidance.
Willy Santos
- [PATCH 04/25] Mapped CCI-000804 to unmet_impractical_guidance.
Shawn Wells
- [PATCH 04/25] Mapped CCI-000804 to unmet_impractical_guidance.
Willy Santos
- [PATCH 04/33] Mapped CCI-001214 to met_inherently.
Willy Santos
- [PATCH 04/37] Remapped CCI-001252 to unmet_impractical_guidance, based on input from Shawn Wells.
Willy Santos
- [PATCH 05/11] Remapped CCI-000027 from requirement_unclear to enable_iptables, based on input from Shawn Wells.
Willy Santos
- [PATCH 05/11] Updated prose of file_permissions_etc_passwd and mapped to CCI-000225
Shawn Wells
- [PATCH 05/11] Updated prose of file_permissions_etc_passwd and mapped to CCI-000225
Willy Santos
- [PATCH 05/11] Updated prose of file_permissions_etc_passwd and mapped to CCI-000225
Shawn Wells
- [PATCH 05/12] Remapped CCI-001143 from requirement_unclear to new_rule_needed, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 05/16] Mapped CCI-000085 to various bluetooth & wireless controls
Shawn Wells
- [PATCH 05/16] Mapped CCI-000085 to various bluetooth & wireless controls
Willy Santos
- [PATCH 05/16] Mapped CCI-000085 to various bluetooth & wireless controls
Shawn Wells
- [PATCH 05/21] Mapped CCI-001140 to requirement_unclear.
Willy Santos
- [PATCH 05/21] Mapped CCI-001140 to requirement_unclear.
Shawn Wells
- [PATCH 05/25] Mapped CCI-001082 to met_inherently.
Willy Santos
- [PATCH 05/33] Mapped CCI-001232 to security_patches_up_to_date.
Willy Santos
- [PATCH 05/37] Remapped CCI-001356 to auditd_configure_rules, based on input from Shawn Wells.
Willy Santos
- [PATCH 06/11] Added Group unmet_impractical_product, as discussed with Jeff Blank, it was accidentally removed on an earlier commit.
Willy Santos
- [PATCH 06/11] Added Group unmet_impractical_product, as discussed with Jeff Blank, it was accidentally removed on an earlier commit.
Shawn Wells
- [PATCH 06/11] Updated prose for perms_shadow_file
Shawn Wells
- [PATCH 06/11] Updated prose for perms_shadow_file
Shawn Wells
- [PATCH 06/11] Updated prose for perms_shadow_file
Willy Santos
- [PATCH 06/12] Remapped CCI-001126 from unmet_impractical_product to unmet_impractical_guidance, it was incorrectly mapped initially.
Willy Santos
- [PATCH 06/16] Mapped rsyslog_send_messages_to_logserver to CCI-000136
Willy Santos
- [PATCH 06/16] Mapped rsyslog_send_messages_to_logserver to CCI-000136
Shawn Wells
- [PATCH 06/16] Mapped rsyslog_send_messages_to_logserver to CCI-000136
Shawn Wells
- [PATCH 06/21] Mapped CCI-001143 to requirement_unclear.
Willy Santos
- [PATCH 06/21] Mapped CCI-001143 to requirement_unclear.
Shawn Wells
- [PATCH 06/25] Mapped CCI-001112 to unmet_impractical_guidance.
Willy Santos
- [PATCH 06/33] Mapped CCI-001233 to updating.
Willy Santos
- [PATCH 06/37] Mapped CCI-001200 to new_rule_needed.
Willy Santos
- [PATCH 07/11] Remapped CCI-000028 from requirement_unclear to unmet_impractical_guidance and unmet_impractical_product, based on input from Shawn Wells.
Willy Santos
- [PATCH 07/11] Updated policy mappings for audit_file_access
Shawn Wells
- [PATCH 07/11] Updated policy mappings for audit_file_access
Shawn Wells
- [PATCH 07/11] Updated policy mappings for audit_file_access
Willy Santos
- [PATCH 07/12] Remapped CCI-001149 from requirement_unclear to unmet_impractical_guidance, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 07/16] Created mappings to CCI-000200
Shawn Wells
- [PATCH 07/16] Created mappings to CCI-000200
Shawn Wells
- [PATCH 07/21] Mapped CCI-001149 to requirement_unclear.
Willy Santos
- [PATCH 07/21] Mapped CCI-001149 to requirement_unclear.
Shawn Wells
- [PATCH 07/25] Mapped CCI-001117 to enable_ip6tables and enable_iptables.
Willy Santos
- [PATCH 07/33] Mapped CCI-001237 to met_inherently.
Willy Santos
- [PATCH 07/37] Mapped CCI-001391 to accounts-pam.
Willy Santos
- [PATCH 08/11] Mapped audit_file_deletions to CCI-000126
Shawn Wells
- [PATCH 08/11] Mapped audit_file_deletions to CCI-000126
Shawn Wells
- [PATCH 08/11] Mapped audit_file_deletions to CCI-000126
Willy Santos
- [PATCH 08/11] Remapped CCI-000029 from requirement_unclear to unmet_impractical_guidance and unmet_impractical_product, based on input from Shawn Wells.
Willy Santos
- [PATCH 08/12] Remapped CCI-001157 from requirement_unclear to unmet_impractical_guidance, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 08/16] Added select idref=limiting_password_reuse to profiles
Willy Santos
- [PATCH 08/16] Added select idref=limiting_password_reuse to profiles
Shawn Wells
- [PATCH 08/16] Added select idref=limiting_password_reuse to profiles Added select idref=limiting_password_reuse to profiles
Shawn Wells
- [PATCH 08/21] Mapped CCI-001157 to requirement_unclear.
Willy Santos
- [PATCH 08/21] Mapped CCI-001157 to requirement_unclear.
Shawn Wells
- [PATCH 08/25] Mapped CCI-000764 to unmet_impractical_guidance.
Willy Santos
- [PATCH 08/25] Mapped CCI-000764 to unmet_impractical_guidance.
Shawn Wells
- [PATCH 08/33] Mapped CCI-001239 to requirement_unclear.
Willy Santos
- [PATCH 08/33] Mapped CCI-001239 to requirement_unclear.
Shawn Wells
- [PATCH 08/37] Mapped CCI-001392 to accounts-pam.
Willy Santos
- [PATCH 09/11] Remapped CCI-000030 from requirement_unclear to unmet_impractical_guidance and unmet_impractical_product, based on input from Shawn Wells.
Willy Santos
- [PATCH 09/11] Updated audit_dac_actions
Shawn Wells
- [PATCH 09/11] Updated audit_dac_actions
Shawn Wells
- [PATCH 09/11] Updated audit_dac_actions
Willy Santos
- [PATCH 09/12] Remapped CCI-001166 from requirement_unclear to aide_periodic_cron_checking, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 09/16] Mapped aide to CCI-000374
Shawn Wells
- [PATCH 09/16] Mapped aide to CCI-000374
Shawn Wells
- [PATCH 09/16] Mapped aide to CCI-000374
Willy Santos
- [PATCH 09/21] Mapped CCI-001158 to requirement_unclear.
Willy Santos
- [PATCH 09/21] Mapped CCI-001158 to requirement_unclear.
Shawn Wells
- [PATCH 09/25] Mapped CCIs 765, 766, 767 and 768 to new_rule_needed.
Willy Santos
- [PATCH 09/33] Mapped CCI-001248 to met_inherently.
Willy Santos
- [PATCH 09/37] Mapped CCI-001395 to requirement_unclear.
Willy Santos
- [PATCH 09/37] Mapped CCI-001395 to requirement_unclear.
Shawn Wells
- [PATCH 1/1] Removed package list from Smart Card section.
Willy Santos
- [PATCH 1/1] Removed package list from Smart Card section.
Shawn Wells
- [PATCH 1/2] added new transform to reformat our XCCDF into STIG-like structure
Shawn Wells
- [PATCH 1/2] added new transform to reformat our XCCDF into STIG-like structure
Jeffrey Blank
- [PATCH 1/2] improved verify-references script to show if Profile does not include all Rules with certain references
Shawn Wells
- [PATCH 1/2] improved verify-references script to show if Profile does not include all Rules with certain references
Jeffrey Blank
- [PATCH 1/2] Mapped CCI 1343 to rule for action on full storage for auditd
Kevin Spargur
- [PATCH 1/2] Updated singleuser mode check to reflect the move away from inittab
Kevin Spargur
- [PATCH 1/3] Added section on partition encryption using LUKS.
Willy Santos
- [PATCH 1/3] Removed duplicate entries causing make validate to fail
Kevin Spargur
- [PATCH 1/3] Removed mapping of CCI-001097 to requirement_unclear.
Willy Santos
- [PATCH 1/3] Removed mapping of CCI-001097 to requirement_unclear.
Shawn Wells
- [PATCH 1/4] added new Value for remembering 24 passwords * which increases number of hashes that can be harvested at any one time * and is apparently also some kind of policy requirement
Jeffrey Blank
- [PATCH 1/4] added notes to support transition of RHEL 5 content to consensus for RHEL 6
Jeffrey Blank
- [PATCH 1/4] Added Value section for login retries and made necessary changes to the deny_password_attempts to reflect the use of these values.
Willy Santos
- [PATCH 1/4] Remapped CCI-000056 from install_vlock_package to met_inherently
Shawn Wells
- [PATCH 1/4] Remapped CCI-000056 from install_vlock_package to met_inherently
Willy Santos
- [PATCH 1/4] Remapped CCI-000056 from install_vlock_package to met_inherently
Shawn Wells
- [PATCH 1/4] Remapped CCI-001311 to servcie_rsyslog_enabled, based on input from the list.
Willy Santos
- [PATCH 1/5] Corrected rule mapping for CCI-143.
Willy Santos
- [PATCH 1/5] Mapped CCIs 196 and 197 to disable_telnet_service as reference in trac ticket #45.
Willy Santos
- [PATCH 10/11] Mapped sshd_disable_root_login to CCI-000770
Shawn Wells
- [PATCH 10/11] Mapped sshd_disable_root_login to CCI-000770
Shawn Wells
- [PATCH 10/11] Mapped sshd_disable_root_login to CCI-000770
Willy Santos
- [PATCH 10/11] Remapped CCI-000032 from requirement_unclear to unmet_impractical_product, based on input from Shawn Wells.
Willy Santos
- [PATCH 10/12] Remapped CCI-001695 from requirement_unclear to unmet_impractical_product, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 10/16] CCI-000770 mapped to restrict_serial_port_logins restrict_root_console_logins root_logins
Shawn Wells
- [PATCH 10/16] CCI-000770 mapped to restrict_serial_port_logins restrict_root_console_logins root_logins
Willy Santos
- [PATCH 10/16] CCI-000770 mapped to restrict_serial_port_logins restrict_root_console_logins root_logins
Shawn Wells
- [PATCH 10/21] Mapped CCI-001166 to requirement_unclear.
Willy Santos
- [PATCH 10/21] Mapped CCI-001166 to requirement_unclear.
Shawn Wells
- [PATCH 10/25] Mapped CCIs 771 and 772 to new_rule_needed.
Willy Santos
- [PATCH 10/33] Mapped CCI-001263 to aide_periodic_cron_checking.
Willy Santos
- [PATCH 10/33] Mapped CCI-001263 to aide_periodic_cron_checking.
Shawn Wells
- [PATCH 10/37] Mapped CCI-001399 to met-inherently.
Willy Santos
- [PATCH 11/11] Fixed typo on line 153
Shawn Wells
- [PATCH 11/11] Fixed typo on line 153
Shawn Wells
- [PATCH 11/11] Fixed typo on line 153
Willy Santos
- [PATCH 11/11] Remapped CCI-000024 from requirement_unclear to unmet_impractical_guidance and unmet_impractical_product, based on input from Shawn Wells.
Willy Santos
- [PATCH 11/12] Remapped CCI-001169 from requirement_unclear to unmet_impractical_product, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 11/16] Mapped CCI-001453 to ldap_client_start_tls and ldap_client_tls_cacertpath
Shawn Wells
- [PATCH 11/16] Mapped CCI-001453 to ldap_client_start_tls and ldap_client_tls_cacertpath
Willy Santos
- [PATCH 11/16] Mapped CCI-001453 to ldap_client_start_tls and ldap_client_tls_cacertpath 1453 requires encrypted comms, this is enforced when using LDAP by implimenting TLS
Shawn Wells
- [PATCH 11/21] Mapped CCI-001695 to requirement_unclear.
Willy Santos
- [PATCH 11/21] Mapped CCI-001695 to requirement_unclear.
Shawn Wells
- [PATCH 11/25] Mapped CCIs 1009 and 1019 to new_rule_needed.
Willy Santos
- [PATCH 11/33] Mapped CCI-001265 to met_inherently.
Willy Santos
- [PATCH 11/37] Mapped CCI-001400 to met-inherently.
Willy Santos
- [PATCH 12/12] Remapped CCI-001170 from requirement_unclear to unmet_impractical_product, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 12/16] Mapped CCI-001589 to aide
Shawn Wells
- [PATCH 12/16] Mapped CCI-001589 to aide
Shawn Wells
- [PATCH 12/16] Mapped CCI-001589 to aide
Willy Santos
- [PATCH 12/21] Mapped CCI-001169 to requirement_unclear.
Willy Santos
- [PATCH 12/21] Mapped CCI-001169 to requirement_unclear.
Shawn Wells
- [PATCH 12/25] Mapped CCI-000779 to ssh_server.
Willy Santos
- [PATCH 12/33] Mapped CCI-001265 to met_inherently.
Willy Santos
- [PATCH 12/37] Mapped CCI-001401 to unmet_impractical_guidance.
Willy Santos
- [PATCH 13/13] Created JBossEAP5 Working Directory
Shawn Wells
- [PATCH 13/13] Created JBossEAP5 Working Directory
Shawn Wells
- [PATCH 13/16] Mapped CCI-000066 to iptables sections
Shawn Wells
- [PATCH 13/16] Mapped CCI-000066 to iptables sections
Shawn Wells
- [PATCH 13/16] Mapped CCI-000066 to iptables sections
Willy Santos
- [PATCH 13/21] Mapped CCI-001170 to requirement_unclear.
Willy Santos
- [PATCH 13/21] Mapped CCI-001170 to requirement_unclear.
Shawn Wells
- [PATCH 13/25] Mapped CCI-000781 to ssh_server.
Willy Santos
- [PATCH 13/33] Mapped CCI-001291 to requirement_unclear.
Willy Santos
- [PATCH 13/37] Mapped CCI-001414 to unmet_impractical_guidance.
Willy Santos
- [PATCH 14/16] Mapped CCI-000213 to bootloader_password and require_singleuser_auth
Shawn Wells
- [PATCH 14/16] Mapped CCI-000213 to bootloader_password and require_singleuser_auth
Willy Santos
- [PATCH 14/16] Mapped CCI-000213 to bootloader_password and require_singleuser_auth
Shawn Wells
- [PATCH 14/21] Mapped CCI-001199 to new_rule_needed.
Willy Santos
- [PATCH 14/25] Mapped CCI-000884 to new_rule_needed.
Willy Santos
- [PATCH 14/33] Mapped CCI-001294 to requirement_unclear.
Willy Santos
- [PATCH 14/37] Mapped CCI-001424 to enabling_selinux.
Willy Santos
- [PATCH 15/16] Mapped CCI-001352 to rsyslog_send_messages_to_logserver
Willy Santos
- [PATCH 15/16] Mapped CCI-001352 to rsyslog_send_messages_to_logserver
Shawn Wells
- [PATCH 15/16] Mapped CCI-001352 to rsyslog_send_messages_to_logserver
Shawn Wells
- [PATCH 15/21] Mapped CCI-001123 to enable_ip6tables, enable_iptables, and service_auditd_enabled.
Shawn Wells
- [PATCH 15/21] Mapped CCI-001123 to enable_ip6tables, enable_iptables, and service_auditd_enabled.
Willy Santos
- [PATCH 15/25] Mapped CCI-000795 to account_disable_post_pw_expiration.
Willy Santos
- [PATCH 15/33] Mapped CCI-001295 to requirement_unclear.
Willy Santos
- [PATCH 15/37] Mapped CCI-001425 to met-inherently.
Willy Santos
- [PATCH 16/16] Mapped CCI-001414 to enable_ip6tables, enable_iptables, set_iptables_default_rule
Shawn Wells
- [PATCH 16/16] Mapped CCI-001414 to enable_ip6tables, enable_iptables, set_iptables_default_rule
Willy Santos
- [PATCH 16/16] Mapped CCI-001414 to enable_ip6tables, enable_iptables, set_iptables_default_rule Mapped CCI-001414 to enable_ip6tables, enable_iptables, set_iptables_default_rule per feedback from DISA FSO.
Shawn Wells
- [PATCH 16/21] Mapped CCI-001190 to enable_auditd_service.
Willy Santos
- [PATCH 16/21] Mapped CCI-001190 to enable_auditd_service.
Shawn Wells
- [PATCH 16/25] Mapped CCI-000831 to enable_auditd_service.
Willy Santos
- [PATCH 16/33] Mapped CCI-001310 to requirement_unclear.
Willy Santos
- [PATCH 16/33] Mapped CCI-001310 to requirement_unclear.
Shawn Wells
- [PATCH 16/37] Mapped CCI-001426 to enabling_selinux.
Willy Santos
- [PATCH 17/21] Mapped CCI-001124 to enable_ip6tables, enable_iptables, httpd_servertokens_prod, and httpd_serversignature_off.
Shawn Wells
- [PATCH 17/21] Mapped CCI-001124 to enable_ip6tables, enable_iptables, httpd_servertokens_prod, and httpd_serversignature_off.
Willy Santos
- [PATCH 17/25] Mapped CCIs 1084, 1086 and 1087.
Willy Santos
- [PATCH 17/33] Mapped CCI-001311 to requirement_unclear.
Willy Santos
- [PATCH 17/33] Mapped CCI-001311 to requirement_unclear.
Shawn Wells
- [PATCH 17/33] Mapped CCI-001311 to requirement_unclear.
Jeffrey Blank
- [PATCH 17/37] Mapped CCI-001427 to met-inherently.
Willy Santos
- [PATCH 18/21] Mapped CCI-001129 to network_ssl.
Willy Santos
- [PATCH 18/21] Mapped CCI-001129 to network_ssl.
Shawn Wells
- [PATCH 18/25] Mapped CCI-001090 to enabling_selinux.
Willy Santos
- [PATCH 18/33] Mapped CCI-001312 to service_syslog_enabled and enable_auditd_service.
Willy Santos
- [PATCH 18/37] Mapped CCI-001428 to requirement_unclear.
Willy Santos
- [PATCH 18/37] Mapped CCI-001428 to requirement_unclear.
Shawn Wells
- [PATCH 19/21] Mapped CCI-001132 to network_ssl.
Willy Santos
- [PATCH 19/21] Mapped CCI-001132 to network_ssl.
Shawn Wells
- [PATCH 19/25] Mapped CCI-001091 to enabling_selinux.
Willy Santos
- [PATCH 19/33] Mapped CCI-001314 to met_inherently.
Willy Santos
- [PATCH 19/37] Mapped CCI-001499 to met-inherently.
Willy Santos
- [PATCH 2/2] added Rules to STIG profile, based on output from verify-references.py * some Rules are still tagged but have not been added yet * some of these need Values specified or require a little more investigation
Jeffrey Blank
- [PATCH 2/2] added Rules to STIG profile, based on output from verify-references.py * some Rules are still tagged but have not been added yet * some of these need Values specified or require a little more investigation
Shawn Wells
- [PATCH 2/2] added Rules to STIG profile, based on output from verify-references.py * some Rules are still tagged but have not been added yet * some of these need Values specified or require a little more investigation
Jeffrey Blank
- [PATCH 2/2] Changed group limiting_password_reuse to a rule
Kevin Spargur
- [PATCH 2/2] Tidied up the rhnsd id tag in the common profile
Kevin Spargur
- [PATCH 2/2] updated Makerules to activate transforms which do STIG formatting
Shawn Wells
- [PATCH 2/2] updated Makerules to activate transforms which do STIG formatting
Jeffrey Blank
- [PATCH 2/3] Added guidance on use of CAC cards.
Willy Santos
- [PATCH 2/3] Added guidance on use of CAC cards.
Shawn Wells
- [PATCH 2/3] Added some spacing to remove a make validate error
Kevin Spargur
- [PATCH 2/3] Removed mapping of CCIs 1199, 1350, 1200 from new_rule_needed, to new group on LUKS.
Willy Santos
- [PATCH 2/4] added DoD banner (with minor changes) from RHEL 5 STIG
Jeffrey Blank
- [PATCH 2/4] Created OVAL check accounts_passwords_pam_faillock_deny, for checking the configured maximum number of failed login attempts the system will allow before locking the account.
Willy Santos
- [PATCH 2/4] Mapped CCI-000057 to enable_screensaver_after_idle
Shawn Wells
- [PATCH 2/4] Mapped CCI-000057 to enable_screensaver_after_idle
Shawn Wells
- [PATCH 2/4] Mapped CCI-000057 to enable_screensaver_after_idle
Willy Santos
- [PATCH 2/4] normalize whitespace for each ref in (attribute) ref list, permitting use of newlines or accidental spaces
Jeffrey Blank
- [PATCH 2/4] Remapped CCI-001395 to unmet_impractical_product based on input from list.
Willy Santos
- [PATCH 2/5] Added some NFSv4 guidance to the rpcbind section.
Willy Santos
- [PATCH 2/5] Corrected mapping of CCI 206.
Willy Santos
- [PATCH 20/21] Mapped CCI-001142 to network_ssl.
Willy Santos
- [PATCH 20/21] Mapped CCI-001142 to network_ssl.
Shawn Wells
- [PATCH 20/25] Mapped CCI-001098 to enable_ip6tables and enable_iptables.
Willy Santos
- [PATCH 20/33] Mapped CCI-001328 to requirement_unclear.
Willy Santos
- [PATCH 20/33] Mapped CCI-001328 to requirement_unclear.
Shawn Wells
- [PATCH 20/37] Mapped CCI-001500 to requirement_unclear.
Willy Santos
- [PATCH 20/37] Mapped CCI-001500 to requirement_unclear.
Shawn Wells
- [PATCH 21/21] Mapped CCI-001147 to network_ssl.
Willy Santos
- [PATCH 21/21] Mapped CCI-001147 to network_ssl.
Shawn Wells
- [PATCH 21/25] Mapped CCI-001100 to enable_ip6tables and enable_iptables.
Willy Santos
- [PATCH 21/33] Mapped CCI-001340 to requirement_unclear.
Willy Santos
- [PATCH 21/33] Mapped CCI-001340 to requirement_unclear.
Shawn Wells
- [PATCH 21/37] Mapped CCI-001555 to unmet_impractical_guidance.
Willy Santos
- [PATCH 21/37] Mapped CCI-001555 to unmet_impractical_guidance.
Shawn Wells
- [PATCH 22/25] Mapped CCI-001097 to enable_ip6tables and enable_iptables.
Willy Santos
- [PATCH 22/33] Mapped CCI-001341 to unmet_impractical_guidance.
Willy Santos
- [PATCH 22/37] Mapped CCI-001555 to unmet_impractical_guidance.
Willy Santos
- [PATCH 23/25] Removed mapping of CCI-001092 from iptables_icmp_disabled, after some discussion with Jeff Blank and Cliff Trueman.
Willy Santos
- [PATCH 23/33] Mapped CCI-001274 to audit_configure_rules.
Willy Santos
- [PATCH 23/37] Mapped CCI-001693 to met-inherently.
Willy Santos
- [PATCH 24/25] Mapped CCIs 1092 and 1095 to set_sysctl_net_ipv4_tcp_syncookies.
Willy Santos
- [PATCH 24/33] Mapped CCI-001350 to new_rule_needed.
Willy Santos
- [PATCH 24/37] Mapped CCI-001662 to unmet_impractical_product.
Willy Santos
- [PATCH 25/25] Mapped CCI-001111 to unmet_impractical_guidance.
Willy Santos
- [PATCH 25/33] Mapped CCI-001352 to unmet_impractical_product.
Willy Santos
- [PATCH 25/33] Mapped CCI-001352 to unmet_impractical_product.
Shawn Wells
- [PATCH 25/37] Mapped CCI-001665 to met_inherently.
Willy Santos
- [PATCH 26/33] Mapped CCI-001356 to requirement_unclear.
Willy Santos
- [PATCH 26/33] Mapped CCI-001356 to requirement_unclear.
Shawn Wells
- [PATCH 26/37] Mapped CCI-001668 to unmet_impractical_product.
Willy Santos
- [PATCH 27/33] Mapped CCI-001362 to met_inherently.
Willy Santos
- [PATCH 27/37] Mapped CCI-001670 to met_inherently.
Willy Santos
- [PATCH 28/33] Mapped CCI-001368 to met_inherently.
Willy Santos
- [PATCH 28/37] Mapped CCI-001674 to met_inherently.
Willy Santos
- [PATCH 29/33] Mapped CCI-001372 to unmet_impractical_guidance.
Willy Santos
- [PATCH 29/37] Mapped CCI-001683 to audit_account_changes.
Willy Santos
- [PATCH 3/3] Added link to RH docs on LUKS.
Willy Santos
- [PATCH 3/3] Mapped CCI382 to several disable service xyz rules
Kevin Spargur
- [PATCH 3/3] Mapped CCI382 to several disable service xyz rules
Jeffrey Blank
- [PATCH 3/3] Remapped CCIs 765, 766, 767, 768, 771, 772, 884 from new_rule_needed to the newly created smart_card_login group. All these CCIs refer to multi-factor authentication.
Willy Santos
- [PATCH 3/3] Remapped CCIs 765, 766, 767, 768, 771, 772, 884 from new_rule_needed to the newly created smart_card_login group. All these CCIs refer to multi-factor authentication.
Shawn Wells
- [PATCH 3/4] Added <sub> sections to the deny_password_attempts rule for automatic substitution of correct value depending on profile.
Willy Santos
- [PATCH 3/4] added missing items to Profiles
Jeffrey Blank
- [PATCH 3/4] added Rules to the common and STIG-server Profiles to make them more complete * driven by addition of CCI references to Rules identified by verify-references.py
Jeffrey Blank
- [PATCH 3/4] Remapped CCI-000553 to unmet_impractical_product based on input from the list.
Willy Santos
- [PATCH 3/4] Updated mappings for CCI-000130
Shawn Wells
- [PATCH 3/4] Updated mappings for CCI-000130
Shawn Wells
- [PATCH 3/4] Updated mappings for CCI-000130
Willy Santos
- [PATCH 3/5] Added V-IDs to rules we can check using rpmverify so they will appear in the notes column of the table.
Willy Santos
- [PATCH 3/5] Corrected mapping of CCI 154.
Willy Santos
- [PATCH 30/33] Mapped CCI-00137 to unmet_impractical_guidance.
Willy Santos
- [PATCH 30/37] Mapped CCI-001685 to audit_account_changes.
Willy Santos
- [PATCH 31/33] Mapped CCI-001374 to unmet_impractical_guidance.
Willy Santos
- [PATCH 31/37] Mapped CCI-001686 to audit_account_changes.
Willy Santos
- [PATCH 32/33] Mapped CCI-001376 to unmet_impractical_guidance.
Willy Santos
- [PATCH 32/37] Mapped CCI-001496 to rpm_verify_hashes and aide_periodic_cron_checking.
Willy Santos
- [PATCH 33/33] Mapped CCI-001377 to unmet_impractical_guidance.
Willy Santos
- [PATCH 33/37] Mapped CCI-000187 to network_ssl.
Willy Santos
- [PATCH 34/37] Mapped CCI-000374 to auditd_configure_rules.
Willy Santos
- [PATCH 35/37] Mapped CCI-000553 to requirement_unclear.
Willy Santos
- [PATCH 35/37] Mapped CCI-000553 to requirement_unclear.
Shawn Wells
- [PATCH 36/37] Mapped CCI-000802 to enabling_selinux.
Willy Santos
- [PATCH 37/37] Mapped CCI-001150 to requirement_unclear.
Willy Santos
- [PATCH 37/37] Mapped CCI-001150 to requirement_unclear.
Shawn Wells
- [PATCH 4/4] Added <refine-value> for STIG-specific value for failed login attempts.
Willy Santos
- [PATCH 4/4] added guidance for ntp encryption
Clifford Trueman
- [PATCH 4/4] added support for setting password expiration to 60 days * and some additional rationale text
Jeffrey Blank
- [PATCH 4/4] deprecating Rules which call for deletion of kernel modules in favor of disabling them
Jeffrey Blank
- [PATCH 4/4] Mapped CCI-000196 to sshd_use_approved_ciphers
Shawn Wells
- [PATCH 4/4] Mapped CCI-000196 to sshd_use_approved_ciphers
Shawn Wells
- [PATCH 4/4] Mapped CCI-000196 to sshd_use_approved_ciphers
Willy Santos
- [PATCH 4/4] Remapped CCI-001150 to unmet_impractical_guidance based on input from the list.
Willy Santos
- [PATCH 4/5] Continued work on NFS service prose.
Willy Santos
- [PATCH 4/5] Removed mapping of CCI-1414 from unmet_impractical_guidance.
Willy Santos
- [PATCH 5/5] Continued work on NFS section of the guide.
Willy Santos
- [PATCH 5/5] Created prose for NFS insecure_locks option.
Willy Santos
- [PATCH] added css hacks to combine some columns to make reading easier * for users who aren't rocking dual 2560x1600 displays
Jeffrey Blank
- [PATCH] added css hacks to combine some columns to make reading easier * for users who aren't rocking dual 2560x1600 displays
Maura Dailey
- [PATCH] Added more NFS prose.
Willy Santos
- [PATCH] Added more NFS prose.
Jeffrey Blank
- [PATCH] Added more NFS prose.
Willy Santos
- [PATCH] added new columns for severity and check content into STIG tables * also combined duplicative xccdf2table-stig transforms into parameterized version
Shawn Wells
- [PATCH] added new columns for severity and check content into STIG tables * also combined duplicative xccdf2table-stig transforms into parameterized version
Jeffrey Blank
- [PATCH] Added prose to describe audit messages.
Willy Santos
- [PATCH] Added prose to describe audit messages.
Jeffrey Blank
- [PATCH] additions to transition notes, STIG profile
Jeffrey Blank
- [PATCH] additions to transition notes, STIG profile
Maura Dailey
- [PATCH] additions to transition notes, STIG profile
Kevin Spargur
- [PATCH] augmented transforms to display CCIs with STIG tables, generate STIG table sorted by CCI * interestingly, some CCIs referenced in the RHEL 5 STIG are not in the OS SRG * and CCIs in the OS SRG are not fully mapped to items in the STIG
Willy Santos
- [PATCH] augmented transforms to display CCIs with STIG tables, generate STIG table sorted by CCI * interestingly, some CCIs referenced in the RHEL 5 STIG are not in the OS SRG * and CCIs in the OS SRG are not fully mapped to items in the STIG
Jeffrey Blank
- [PATCH] Commented out unreferenced sysctl_net_ipv4_icmp_ignore_bogus_error_responses check/value
Michael Palmiotto
- [PATCH] Commented out unreferenced check/value.
Michael Palmiotto
- [PATCH] Commented out unreferenced check/value.
Shawn Wells
- [PATCH] Commented out unreferenced check/value.
Spencer R. Shimko
- [PATCH] Commented out unreferenced check/value.
Michael Palmiotto
- [PATCH] Commented out unreferenced check/value.
Shawn Wells
- [PATCH] Make SSG require python and python-lxml
Michael Palmiotto
- [PATCH] Make SSG require python and python-lxml
Jeffrey Blank
- [PATCH] Make SSG require python and python-lxml
Michael Palmiotto
- [PATCH] minor modification to Makefile
Jeffrey Blank
- [PATCH] Modified no_empty_password rule.
Willy Santos
- [PATCH] Modified no_empty_password rule.
Jeffrey Blank
- [PATCH] Notes from DCM on 1-AUG
Shawn Wells
- [PATCH] Notes from DCM on 1-AUG Notes from DCM on 1-AUG
Shawn Wells
- [PATCH] potentially disruptive patch
Jeffrey Blank
- [PATCH] potentially disruptive patch
Shawn Wells
- [PATCH] refactoring of Makefile to support per-subproject builds
Jeffrey Blank
- [PATCH] refactoring of Makefile to support per-subproject builds
Willy Santos
- [PATCH] refactoring of Makefile, installation procedure
Jeffrey Blank
- [PATCH] Removed a redundant profile reference to the remember password rule
Kevin Spargur
- [PATCH] Removed duplicate service_rhnsd_disabled
root (none)
- [PATCH] Removed duplicate service_rhnsd_disabled
Shawn Wells
- [PATCH] Removed duplicate service_rhnsd_disabled
Michael Palmiotto
- [PATCH] Removed duplicate service_rhnsd_disabled
Shawn Wells
- [PATCH] removed non-applicable CCI references (which could be added in an automated way later, if wanted)
Willy Santos
- [PATCH] removed non-applicable CCI references (which could be added in an automated way later, if wanted)
Jeffrey Blank
- [PATCH] Removed redundant profile ref
Kevin Spargur
- [PATCH] Removed redundant profile ref
Willy Santos
- [PATCH] renaming of toplevel RHEL6 directory, removing unnecessary src directory * updated specfile and Makefile accordingly (fingers crossed)
Kevin Spargur
- [PATCH] renaming of toplevel RHEL6 directory, removing unnecessary src directory * updated specfile and Makefile accordingly (fingers crossed)
Jeffrey Blank
- [PATCH] renaming of toplevel RHEL6 directory, removing unnecessary src directory * updated specfile and Makefile accordingly (fingers crossed)
Spencer R. Shimko
- [PATCH] renaming of toplevel RHEL6 directory, removing unnecessary src directory * updated specfile and Makefile accordingly (fingers crossed)
Jeffrey Blank
- [PATCH] Requires python, python-lxml in spec file
Michael Palmiotto
- [PATCH] Rule and checks for disabling qpidd per ticket 50
Kevin Spargur
- [PATCH] Rule and checks for disabling qpidd per ticket 50
Shawn Wells
- [PATCH] Rule and checks for disabling qpidd per ticket 50
Kevin Spargur
- [PATCH] Rule and checks for disabling qpidd per ticket 50
Shawn Wells
- [PATCH] support for adding notes to RHEL 5 STIG content, for transparent migration to consensus
Jeffrey Blank
- [PATCH] support for adding notes to RHEL 5 STIG content, for transparent migration to consensus
Willy Santos
- [PATCH] support for adding notes to support consensus discussion
Jeffrey Blank
- [PATCH] Swapped bogus_error_messages for bogus_error_responses
Shawn Wells
- [PATCH] Swapped bogus_error_messages for bogus_error_responses
Shawn Wells
- [PATCH] Swapped bogus_error_messages for bogus_error_responses
Shawn Wells
- [PATCH] Swapped bogus_error_messages for bogus_error_responses
Shawn Wells
- [PATCH] Swapped bogus_error_messages for bogus_error_responses
Michael Palmiotto
- [PATCH] Swapped bogus_error_messages for bogus_error_responses
Shawn Wells
- [PATCH] Swapped bogus_error_messages for bogus_error_responses
Kevin Spargur
- [PATCH] Swapped bogus_error_messages for bogus_error_responses
Shawn Wells
- [PATCH] transform to support visibility of CCIs
Jeffrey Blank
- [PATCH] update so that toplevel "Make all" leaves output files in subprojects * imperfectly, this also causes project building twice: once for the subproject, and again during RPM building. But this behavior feels more appropriate than a Make rule which leaves subprojects cleaned
Shawn Wells
- [PATCH] update so that toplevel "Make all" leaves output files in subprojects * imperfectly, this also causes project building twice: once for the subproject, and again during RPM building. But this behavior feels more appropriate than a Make rule which leaves subprojects cleaned
Jeffrey Blank
- [PATCH] updates to transform which display STIGs as tables
Jeffrey Blank
- Just for fun: gitstats
Shawn Wells
- No subject
- No subject
- NTP encryption guidance
ctrueman at redhat.com
- NTP encryption guidance
Jeffrey Blank
- NTP encryption guidance
Shawn Wells
- NTP encryption guidance
ctrueman at redhat.com
- NTP encryption guidance
Jeffrey Blank
- OS SRG mappings -- feedback
Jeffrey Blank
- OS SRG mappings -- feedback
Willy Santos
- OS SRG mappings -- items differing
Jeffrey Blank
- OS SRG mappings -- items differing
Shawn Wells
- OS SRG mappings -- items unclear/impractical
Jeffrey Blank
- OS SRG mappings -- items unclear/impractical
Shawn Wells
- OS SRG mappings -- items unclear/impractical
Kevin Spargur
- OS SRG mappings -- items unclear/impractical
Shawn Wells
- Profiles updates
Jeffrey Blank
- RHEL 5 STIG CCI IDs not in OS SRG
Willy Santos
- SCAP Security Guide and CLIP for RHEL 6.2 Alpha
Spencer R. Shimko
- SCAP Security Guide and CLIP for RHEL 6.2 Alpha
Shawn Wells
- Test email
Stephen John Smoogen
Last message date:
Tue Jul 31 21:19:33 UTC 2012
Archived on: Mon Oct 1 06:10:51 UTC 2012
This archive was generated by
Pipermail 0.09 (Mailman edition).