[PATCH 0/3] overhaul of auditing section

Jeffrey Blank blank at eclipse.ncsc.mil
Wed Jun 6 01:54:41 UTC 2012


Added support for Values, tested checks, updated Rules.

Jeffrey Blank (3):
  significant overhaul and QA of auditing section
  updates to Profiles to support auditing Rules      * also removal of
    some Rules which don't belong in common Profile
  significant overhaul of OVAL checks for auditing      * support for
    Values      * consistent naming (which may yet be made more concise
    in the future)      * actually tested the checks

 .../auditd_data_retention_action_mail_acct.xml     |   36 ++
 .../auditd_data_retention_admin_space_left.xml     |   30 --
 ...ditd_data_retention_admin_space_left_action.xml |   36 ++
 .../checks/auditd_data_retention_mail_acct.xml     |   30 --
 .../input/checks/auditd_data_retention_max_log.xml |   30 --
 .../checks/auditd_data_retention_max_log_file.xml  |   28 +-
 .../auditd_data_retention_max_log_file_action.xml  |   36 ++
 .../checks/auditd_data_retention_num_logs.xml      |   36 ++
 .../checks/auditd_data_retention_space_left.xml    |   30 --
 .../auditd_data_retention_space_left_action.xml    |   36 ++
 rhel6/src/input/profiles/common.xml                |   22 +-
 rhel6/src/input/profiles/test.xml                  |   20 +-
 rhel6/src/input/system/auditing.xml                |  362 ++++++++++++++------
 13 files changed, 494 insertions(+), 238 deletions(-)
 create mode 100644 rhel6/src/input/checks/auditd_data_retention_action_mail_acct.xml
 delete mode 100644 rhel6/src/input/checks/auditd_data_retention_admin_space_left.xml
 create mode 100644 rhel6/src/input/checks/auditd_data_retention_admin_space_left_action.xml
 delete mode 100644 rhel6/src/input/checks/auditd_data_retention_mail_acct.xml
 delete mode 100644 rhel6/src/input/checks/auditd_data_retention_max_log.xml
 create mode 100644 rhel6/src/input/checks/auditd_data_retention_max_log_file_action.xml
 create mode 100644 rhel6/src/input/checks/auditd_data_retention_num_logs.xml
 delete mode 100644 rhel6/src/input/checks/auditd_data_retention_space_left.xml
 create mode 100644 rhel6/src/input/checks/auditd_data_retention_space_left_action.xml



More information about the scap-security-guide mailing list