July 2012 Archives by thread
Starting: Mon Jul 2 21:18:16 UTC 2012
Ending: Tue Jul 31 21:19:33 UTC 2012
Messages: 464
- [PATCH 00/11] CCI Mapping changes based on list input
Willy Santos
- [PATCH 01/11] Changed mapping of CCI-000099 from requirement_unclear to met_inherently based on recommendation from Shawn Wells.
Willy Santos
- [PATCH 02/11] Added mapping of CCI-000085 to auditd_configure_rules based on guidance from Shawn Wells.
Willy Santos
- [PATCH 03/11] Remapped CCI-000025 from requirement_unclear to unmet_impractical_guidance, based on input from Shawn Wells.
Willy Santos
- [PATCH 04/11] Remapped CCI-000026 from requirement_unclear to enabling_selinux, based on input from Shawn Wells.
Willy Santos
- [PATCH 05/11] Remapped CCI-000027 from requirement_unclear to enable_iptables, based on input from Shawn Wells.
Willy Santos
- [PATCH 06/11] Added Group unmet_impractical_product, as discussed with Jeff Blank, it was accidentally removed on an earlier commit.
Willy Santos
- [PATCH 07/11] Remapped CCI-000028 from requirement_unclear to unmet_impractical_guidance and unmet_impractical_product, based on input from Shawn Wells.
Willy Santos
- [PATCH 08/11] Remapped CCI-000029 from requirement_unclear to unmet_impractical_guidance and unmet_impractical_product, based on input from Shawn Wells.
Willy Santos
- [PATCH 09/11] Remapped CCI-000030 from requirement_unclear to unmet_impractical_guidance and unmet_impractical_product, based on input from Shawn Wells.
Willy Santos
- [PATCH 10/11] Remapped CCI-000032 from requirement_unclear to unmet_impractical_product, based on input from Shawn Wells.
Willy Santos
- [PATCH 11/11] Remapped CCI-000024 from requirement_unclear to unmet_impractical_guidance and unmet_impractical_product, based on input from Shawn Wells.
Willy Santos
- [PATCH 00/11] CCI Mapping changes based on list input
Shawn Wells
- [PATCH 00/25] More CCI Mappings
Willy Santos
- [PATCH 01/25] Mapped CCI-000770 to new_rule_needed.
Willy Santos
- [PATCH 00/21] More CCI Mappings
Willy Santos
- [PATCH 01/11] Mapped all SRG-OS-NA to unmet_impractical_guidance
Shawn Wells
- [PATCH 02/11] Updated prose for no_uidzero_except_root & added CCI mapping
Shawn Wells
- [PATCH 03/11] Prose updates to rsyslog_file_permissions, mapped to CCI-001314
Shawn Wells
- [PATCH 04/11] Updated prose of userowner_shadow_file, mapped to CCI-000225 Updated language to match that of RHEL5 STIG, mapped to CCI-000225
Shawn Wells
- [PATCH 05/11] Updated prose of file_permissions_etc_passwd and mapped to CCI-000225
Shawn Wells
- [PATCH 06/11] Updated prose for perms_shadow_file
Shawn Wells
- [PATCH 07/11] Updated policy mappings for audit_file_access
Shawn Wells
- [PATCH 08/11] Mapped audit_file_deletions to CCI-000126
Shawn Wells
- [PATCH 09/11] Updated audit_dac_actions
Shawn Wells
- [PATCH 10/11] Mapped sshd_disable_root_login to CCI-000770
Shawn Wells
- [PATCH 11/11] Fixed typo on line 153
Shawn Wells
- [PATCH 01/11] Mapped all SRG-OS-NA to unmet_impractical_guidance
Shawn Wells
- [PATCH 02/11] Updated prose for no_uidzero_except_root & added CCI mapping
Shawn Wells
- [PATCH 03/11] Prose updates to rsyslog_file_permissions, mapped to CCI-001314
Shawn Wells
- [PATCH 04/11] Updated prose of userowner_shadow_file, mapped to CCI-000225
Shawn Wells
- [PATCH 05/11] Updated prose of file_permissions_etc_passwd and mapped to CCI-000225
Shawn Wells
- [PATCH 06/11] Updated prose for perms_shadow_file
Shawn Wells
- [PATCH 07/11] Updated policy mappings for audit_file_access
Shawn Wells
- [PATCH 08/11] Mapped audit_file_deletions to CCI-000126
Shawn Wells
- [PATCH 09/11] Updated audit_dac_actions
Shawn Wells
- [PATCH 10/11] Mapped sshd_disable_root_login to CCI-000770
Shawn Wells
- [PATCH 11/11] Fixed typo on line 153
Shawn Wells
- [PATCH 13/13] Created JBossEAP5 Working Directory
Shawn Wells
- [PATCH] refactoring of Makefile to support per-subproject builds
Jeffrey Blank
- [PATCH 00/12] CCI Remaps based on list input.
Willy Santos
- [PATCH 03/12] Remapped CCI-001126 from requirement_unclear to unmet_impractical_product, based on input from Shawn Wells.
Willy Santos
- [PATCH 04/12] Remapped CCI-001140 from requirement_unclear to new_rule_needed, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 05/12] Remapped CCI-001143 from requirement_unclear to new_rule_needed, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 06/12] Remapped CCI-001126 from unmet_impractical_product to unmet_impractical_guidance, it was incorrectly mapped initially.
Willy Santos
- [PATCH 07/12] Remapped CCI-001149 from requirement_unclear to unmet_impractical_guidance, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 08/12] Remapped CCI-001157 from requirement_unclear to unmet_impractical_guidance, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 09/12] Remapped CCI-001166 from requirement_unclear to aide_periodic_cron_checking, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 10/12] Remapped CCI-001695 from requirement_unclear to unmet_impractical_product, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 11/12] Remapped CCI-001169 from requirement_unclear to unmet_impractical_product, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 12/12] Remapped CCI-001170 from requirement_unclear to unmet_impractical_product, based on guidance from Shawn Wells.
Willy Santos
- [PATCH 00/12] CCI Remaps based on list input.
ctrueman at redhat.com
- [PATCH 01/12] Remapped CCI-001159 from requirement_unclear to new_rule_needed, based on input from Shawn Wells.
Willy Santos
- [PATCH 02/12] Remapped CCI-001125 from requirement_unclear to new_rule_needed, based on input from Shawn Wells.
Willy Santos
- [PATCH 00/33] More CCI Mappings
Willy Santos
- [PATCH 00/37] More CCI mappings
Willy Santos
- [PATCH 0/2] support for listing STIG Rules in tables
Jeffrey Blank
- [PATCH 0/4] Updated CCI Mappings
Willy Santos
- [PATCH] minor modification to Makefile
Jeffrey Blank
- [PATCH] update so that toplevel "Make all" leaves output files in subprojects * imperfectly, this also causes project building twice: once for the subproject, and again during RPM building. But this behavior feels more appropriate than a Make rule which leaves subprojects cleaned
Jeffrey Blank
- [PATCH] potentially disruptive patch
Jeffrey Blank
- [PATCH] renaming of toplevel RHEL6 directory, removing unnecessary src directory * updated specfile and Makefile accordingly (fingers crossed)
Jeffrey Blank
- [PATCH] removed non-applicable CCI references (which could be added in an automated way later, if wanted)
Jeffrey Blank
- [PATCH] transform to support visibility of CCIs
Jeffrey Blank
- RHEL 5 STIG CCI IDs not in OS SRG
Willy Santos
- [PATCH] support for adding notes to support consensus discussion
Jeffrey Blank
- [PATCH 0/5] Various additions
Willy Santos
- [PATCH] Requires python, python-lxml in spec file
Michael Palmiotto
- [PATCH] Make SSG require python and python-lxml
Michael Palmiotto
- [PATCH] Added more NFS prose.
Willy Santos
- [PATCH] Removed duplicate service_rhnsd_disabled
root (none)
- [PATCH] Removed duplicate service_rhnsd_disabled
Shawn Wells
- [PATCH] Swapped bogus_error_messages for bogus_error_responses
Shawn Wells
- [PATCH] Swapped bogus_error_messages for bogus_error_responses
Shawn Wells
- [PATCH] Swapped bogus_error_messages for bogus_error_responses
Shawn Wells
- [PATCH] Commented out unreferenced sysctl_net_ipv4_icmp_ignore_bogus_error_responses check/value
Michael Palmiotto
- [PATCH 4/4] added guidance for ntp encryption
Clifford Trueman
- NTP encryption guidance
ctrueman at redhat.com
- [PATCH 01/16] Mapped sshd_enable_warning_banner to CCI-000048
Shawn Wells
- [PATCH 02/16] Mapped ftp_present_banner to CCI-000048
Shawn Wells
- [PATCH 03/16] Mapped set_screensaver_inactivity_timeout and enable_screensaver_password_lock to CCI-000057 Added mappings to CCI-000057 to directly associate the gconf settings
Shawn Wells
- [PATCH 04/16] Mapped CCI-000060 to set_blank_screensaver 60 requires a "publicaly viewable pattern" be placed on the screen during locks. set_blank_screensaver addresses this by blanking out the screen
Shawn Wells
- [PATCH 05/16] Mapped CCI-000085 to various bluetooth & wireless controls
Shawn Wells
- [PATCH 06/16] Mapped rsyslog_send_messages_to_logserver to CCI-000136
Shawn Wells
- [PATCH 07/16] Created mappings to CCI-000200
Shawn Wells
- [PATCH 08/16] Added select idref=limiting_password_reuse to profiles Added select idref=limiting_password_reuse to profiles
Shawn Wells
- [PATCH 09/16] Mapped aide to CCI-000374
Shawn Wells
- [PATCH 10/16] CCI-000770 mapped to restrict_serial_port_logins restrict_root_console_logins root_logins
Shawn Wells
- [PATCH 0/3] Added prose about CAC cards
Willy Santos
- [PATCH 11/16] Mapped CCI-001453 to ldap_client_start_tls and ldap_client_tls_cacertpath 1453 requires encrypted comms, this is enforced when using LDAP by implimenting TLS
Shawn Wells
- [PATCH 12/16] Mapped CCI-001589 to aide
Shawn Wells
- [PATCH 0/2] Updated singleuser pw check and a profile id
Kevin Spargur
- [PATCH 1/1] Removed package list from Smart Card section.
Willy Santos
- SCAP Security Guide and CLIP for RHEL 6.2 Alpha
Spencer R. Shimko
- [PATCH] updates to transform which display STIGs as tables
Jeffrey Blank
- [PATCH 0/3] New prose about using LUKS.
Willy Santos
- [PATCH 1/3] Added section on partition encryption using LUKS.
Willy Santos
- [PATCH 2/3] Removed mapping of CCIs 1199, 1350, 1200 from new_rule_needed, to new group on LUKS.
Willy Santos
- OS SRG mappings -- feedback
Jeffrey Blank
- OS SRG mappings -- items unclear/impractical
Jeffrey Blank
- OS SRG mappings -- items differing
Jeffrey Blank
- [PATCH 13/16] Mapped CCI-000066 to iptables sections
Shawn Wells
- [PATCH 14/16] Mapped CCI-000213 to bootloader_password and require_singleuser_auth
Shawn Wells
- [PATCH 15/16] Mapped CCI-001352 to rsyslog_send_messages_to_logserver
Shawn Wells
- [PATCH 16/16] Mapped CCI-001414 to enable_ip6tables, enable_iptables, set_iptables_default_rule Mapped CCI-001414 to enable_ip6tables, enable_iptables, set_iptables_default_rule per feedback from DISA FSO.
Shawn Wells
- [PATCH 01/16] Mapped sshd_enable_warning_banner to CCI-000048
Shawn Wells
- [PATCH] Swapped bogus_error_messages for bogus_error_responses
Shawn Wells
- [PATCH 02/16] Mapped ftp_present_banner to CCI-000048
Shawn Wells
- [PATCH 03/16] Mapped set_screensaver_inactivity_timeout and enable_screensaver_password_lock to CCI-000057
Shawn Wells
- [PATCH 04/16] Mapped CCI-000060 to set_blank_screensaver
Shawn Wells
- [PATCH 05/16] Mapped CCI-000085 to various bluetooth & wireless controls
Shawn Wells
- [PATCH 06/16] Mapped rsyslog_send_messages_to_logserver to CCI-000136
Shawn Wells
- [PATCH 07/16] Created mappings to CCI-000200
Shawn Wells
- [PATCH 08/16] Added select idref=limiting_password_reuse to profiles
Shawn Wells
- [PATCH 09/16] Mapped aide to CCI-000374
Shawn Wells
- [PATCH 10/16] CCI-000770 mapped to restrict_serial_port_logins restrict_root_console_logins root_logins
Shawn Wells
- [PATCH 11/16] Mapped CCI-001453 to ldap_client_start_tls and ldap_client_tls_cacertpath
Shawn Wells
- [PATCH 12/16] Mapped CCI-001589 to aide
Shawn Wells
- [PATCH 13/16] Mapped CCI-000066 to iptables sections
Shawn Wells
- [PATCH 14/16] Mapped CCI-000213 to bootloader_password and require_singleuser_auth
Shawn Wells
- [PATCH 15/16] Mapped CCI-001352 to rsyslog_send_messages_to_logserver
Shawn Wells
- [PATCH 16/16] Mapped CCI-001414 to enable_ip6tables, enable_iptables, set_iptables_default_rule
Shawn Wells
- [PATCH 1/4] Remapped CCI-000056 from install_vlock_package to met_inherently
Shawn Wells
- [PATCH 2/4] Mapped CCI-000057 to enable_screensaver_after_idle
Shawn Wells
- [PATCH 3/4] Updated mappings for CCI-000130
Shawn Wells
- [PATCH 4/4] Mapped CCI-000196 to sshd_use_approved_ciphers
Shawn Wells
- [PATCH 1/4] Remapped CCI-000056 from install_vlock_package to met_inherently
Shawn Wells
- [PATCH 2/4] Mapped CCI-000057 to enable_screensaver_after_idle
Shawn Wells
- [PATCH 3/4] Updated mappings for CCI-000130
Shawn Wells
- [PATCH 4/4] Mapped CCI-000196 to sshd_use_approved_ciphers
Shawn Wells
- OS SRG mappings -- feedback
Willy Santos
- [PATCH 0/2] making sure anything with a CCI ref is in the STIG profile
Jeffrey Blank
- [PATCH 0/1] Rule and checks for disabling qpidd per ticket 50
Kevin Spargur
- [PATCH 0/5] Changes based on feedback from DISA FSO.
Willy Santos
- [PATCH 0/3] Cleaned up some make validate errors and mapped some CCI's
Kevin Spargur
- Profiles updates
Jeffrey Blank
- [PATCH 0/2] Mapped CCI1343 and fixed group/rule
Kevin Spargur
- "This element is not expected." running oscap
Willem Bos
- [PATCH] Removed redundant profile ref
Kevin Spargur
- Test email
Stephen John Smoogen
- No subject
- No subject
- Just for fun: gitstats
Shawn Wells
- [PATCH] Notes from DCM on 1-AUG Notes from DCM on 1-AUG
Shawn Wells
- [PATCH] Notes from DCM on 1-AUG
Shawn Wells
- [PATCH] Added prose to describe audit messages.
Willy Santos
- [PATCH 0/4] notes toward consensus, additions from RHEL 5 STIG
Jeffrey Blank
- [PATCH] Modified no_empty_password rule.
Willy Santos
- [PATCH 0/4] additions to Profiles for STIG-server and common
Jeffrey Blank
- [PATCH 1/4] added new Value for remembering 24 passwords * which increases number of hashes that can be harvested at any one time * and is apparently also some kind of policy requirement
Jeffrey Blank
- [PATCH 2/4] added DoD banner (with minor changes) from RHEL 5 STIG
Jeffrey Blank
- [PATCH 3/4] added Rules to the common and STIG-server Profiles to make them more complete * driven by addition of CCI references to Rules identified by verify-references.py
Jeffrey Blank
- [PATCH 4/4] deprecating Rules which call for deletion of kernel modules in favor of disabling them
Jeffrey Blank
- [PATCH] added css hacks to combine some columns to make reading easier * for users who aren't rocking dual 2560x1600 displays
Jeffrey Blank
- [PATCH] additions to transition notes, STIG profile
Jeffrey Blank
- [PATCH 0/4] Added content based on DISA FSO feedback.
Willy Santos
Last message date:
Tue Jul 31 21:19:33 UTC 2012
Archived on: Mon Oct 1 06:10:51 UTC 2012
This archive was generated by
Pipermail 0.09 (Mailman edition).