[PATCH 0/1] Broke apart ldap checkpeer, added dependency tests

Jeffrey Blank blank at eclipse.ncsc.mil
Fri Jun 15 19:00:14 UTC 2012


ACK, please push.
Thanks -- I'd been meaning to get to this for a while!



On 06/15/2012 02:36 PM, Kevin Spargur wrote:
> Broke apart the ldap checkpeer tests into individual checks.  It now checks 
> for pam_ldap first rather than failing you for not having pointless config 
> files.  Removed checkpeer test as it's looking for the default setting.
> 
> Signed-off-by: Kevin Spargur <kspargur at redhat.com>
> 
> Kevin Spargur (1):
>   Broke apart ldap checkpeer, added dependency tests
> 
>  .../input/checks/ldap_client_pam_ldap_present.xml  |   32 +++++++++++++
>  rhel6/src/input/checks/ldap_client_start_tls.xml   |   32 +++++++++++++
>  .../input/checks/ldap_client_tls_cacertpath.xml    |   48 ++++++++++++++++++++
>  .../src/input/checks/ldap_client_tls_checkpeer.xml |   31 -------------
>  .../src/input/checks/package_pam_ldap_removed.xml  |   26 +++++++++++
>  rhel6/src/input/profiles/common.xml                |    3 +-
>  rhel6/src/input/services/ldap.xml                  |   48 +++++++++++++-------
>  7 files changed, 171 insertions(+), 49 deletions(-)
>  create mode 100644 rhel6/src/input/checks/ldap_client_pam_ldap_present.xml
>  create mode 100644 rhel6/src/input/checks/ldap_client_start_tls.xml
>  create mode 100644 rhel6/src/input/checks/ldap_client_tls_cacertpath.xml
>  delete mode 100644 rhel6/src/input/checks/ldap_client_tls_checkpeer.xml
>  create mode 100644 rhel6/src/input/checks/package_pam_ldap_removed.xml
> 


More information about the scap-security-guide mailing list