June 2012 Archives by subject
Starting: Mon Jun 4 13:17:29 UTC 2012
Ending: Fri Jun 29 23:03:39 UTC 2012
Messages: 214
- [PATCH 0/1] Broke apart auditd rules/prose for time changes
Kevin Spargur
- [PATCH 0/1] Broke apart auditd rules/prose for time changes
Jeffrey Blank
- [PATCH 0/1] Broke apart ldap checkpeer, added dependency tests
Kevin Spargur
- [PATCH 0/1] Broke apart ldap checkpeer, added dependency tests
Jeffrey Blank
- [PATCH 0/2] reworked text in base services
Jeffrey Blank
- [PATCH 0/3] overhaul of auditing section
Jeffrey Blank
- [PATCH 0/4] ability to view pre-release draft RHEL 6 STIG profile, prose cleanup
Jeffrey Blank
- [PATCH 0/4] ability to view pre-release draft RHEL 6 STIG profile, prose cleanup
Shawn Wells
- [PATCH 0/5] More CCI mappings
Willy Santos
- [PATCH 0/5] More CCI mappings
Jeffrey Blank
- [PATCH 0/6] More CCI mappings
Willy Santos
- [PATCH 0/6] More CCI mappings
Shawn Wells
- [PATCH 0/8] More CCI Mappings
Willy Santos
- [PATCH 0/8] More CCI Mappings
Shawn Wells
- [PATCH 0/9] More CCI mappings
Willy Santos
- [PATCH 0/9] More CCI mappings
Shawn Wells
- [PATCH 00/25] More CCI mappings
Willy Santos
- [PATCH 00/25] More CCI mappings
Shawn Wells
- [PATCH 00/25] More CCI mappings
Willy Santos
- [PATCH 00/25] More CCI mappings
Shawn Wells
- [PATCH 00/26] More CCI mappings
Willy Santos
- [PATCH 00/26] More CCI mappings
Jeffrey Blank
- [PATCH 00/26] More CCI Mappings
Willy Santos
- [PATCH 00/26] More CCI Mappings
Shawn Wells
- [PATCH 01/25] Mapped CCI-1127 to network_ssl.
Willy Santos
- [PATCH 01/26] Changed mapping of CCI-000386 from requirement_unclear to met_inherently as suggested by Shawn Wells.
Shawn Wells
- [PATCH 01/26] Changed mapping of CCI-000386 from requirement_unclear to met_inherently as suggested by Shawn Wells.
Willy Santos
- [PATCH 01/26] Mapped CCI-000022 to set_selinux_state in selinux.xml
Willy Santos
- [PATCH 02/25] Mapped CCI-001154 to set_iptables_default_rule
Willy Santos
- [PATCH 02/26] Corrected CCI reference number.
Willy Santos
- [PATCH 02/26] Removed mapping of CCI-001092 from requirement_unclear, based on discussion/input from Shawn Wells.
Shawn Wells
- [PATCH 02/26] Removed mapping of CCI-001092 from requirement_unclear, based on discussion/input from Shawn Wells.
Willy Santos
- [PATCH 03/25] Mapped CCI-001250 to kernel_module_usb-storage_disabled.
Shawn Wells
- [PATCH 03/25] Mapped CCI-001250 to kernel_module_usb-storage_disabled.
Willy Santos
- [PATCH 03/26] Mapped CCI-000050 to enable_gdm_login_banner in banners.xml
Willy Santos
- [PATCH 03/26] Mapped CCI-001092 to iptables_icmp_disabled and enable_iptables enable_ip6tables.
Willy Santos
- [PATCH 03/26] Mapped CCI-001092 to iptables_icmp_disabled and enable_iptables enable_ip6tables.
Shawn Wells
- [PATCH 04/25] Mapped CCI-001250 to kernel_module_usb-storage_removed.
Willy Santos
- [PATCH 04/26] Mapped CCI-000131 to met_inherently in srg_support.xml
Willy Santos
- [PATCH 04/26] Mapped CCI-001092 to password_retry.
Willy Santos
- [PATCH 04/26] Mapped CCI-001092 to password_retry.
Shawn Wells
- [PATCH 05/25] Mapped CCI-001250 to bootloader_nousb_argument.
Willy Santos
- [PATCH 05/26] Mapped CCI-000024 to requirement_unclear.
Willy Santos
- [PATCH 05/26] Mapped CCI-000024 to requirement_unclear.
Shawn Wells
- [PATCH 05/26] Mapped CCI-000132 to met_inherently in srg_support.xml
Willy Santos
- [PATCH 06/25] Mapped CCI-001250 to kernel_module_usb-storage_removed.
Willy Santos
- [PATCH 06/26] Mapped CCI-000025 to requirement_unclear.
Willy Santos
- [PATCH 06/26] Mapped CCI-000025 to requirement_unclear.
Shawn Wells
- [PATCH 06/26] Mapped CCI-000133 to met_inherently in srg_support.xml
Willy Santos
- [PATCH 07/25] Mapped CCI-001250 to service_autofs_disabled.
Willy Santos
- [PATCH 07/25] Mapped CCI-001250 to service_autofs_disabled.
Shawn Wells
- [PATCH 07/26] Mapped CCI-000026 to requirement_unclear.
Willy Santos
- [PATCH 07/26] Mapped CCI-000026 to requirement_unclear.
Shawn Wells
- [PATCH 07/26] Mapped CCI-000134 to met_inherently in srg_support.xml
Willy Santos
- [PATCH 08/25] Mapped CCI-001343 to new_rule_needed.
Willy Santos
- [PATCH 08/26] Mapped CCI-000027 to requirement_unclear.
Willy Santos
- [PATCH 08/26] Mapped CCI-000027 to requirement_unclear.
Shawn Wells
- [PATCH 08/26] Mapped CCI-000137 to partition_for_var_log_audit in disk_partitioning.xml
Willy Santos
- [PATCH 09/25] Mapped CCI-001348 to rsyslog_remote_loghost.
Willy Santos
- [PATCH 09/26] Mapped CCI-000028 to requirement_unclear.
Willy Santos
- [PATCH 09/26] Mapped CCI-000028 to requirement_unclear.
Shawn Wells
- [PATCH 09/26] Mapped CCI-000138 to configure_auditd_data_retention in autditing.xml
Willy Santos
- [PATCH 1/1] Broke apart auditd rules/prose for time changes
Kevin Spargur
- [PATCH 1/1] Broke apart ldap checkpeer, added dependency tests
Kevin Spargur
- [PATCH 1/2] added rationale to base services guidance * moved some service discussion elsewhere
Shawn Wells
- [PATCH 1/2] added rationale to base services guidance * moved some service discussion elsewhere
Jeffrey Blank
- [PATCH 1/3] significant overhaul and QA of auditing section
Jeffrey Blank
- [PATCH 1/4] added Makerule, transform to create table for RHEL 6 STIG Profile (Pre-release Draft)
Jeffrey Blank
- [PATCH 1/5] Mapped CCI-000381 to principle-minimize-software
Willy Santos
- [PATCH 1/6] Mapped CCI-000037 to unmet_impractical_guidance
Willy Santos
- [PATCH 1/8] Mapped CCI-001130 to install_openswan
Willy Santos
- [PATCH 1/9] Added Rule to set the maximum amount of concurrent login sessions per user. Mapped rule to CCI-000054 which requires the operating system to limit the number of concurrent sessions for each account.
Willy Santos
- [PATCH 10/25] Mapped CCI-001493 to met_inherently.
Willy Santos
- [PATCH 10/26] Mapped CCI-000029 to requirement_unclear.
Willy Santos
- [PATCH 10/26] Mapped CCI-000029 to requirement_unclear.
Shawn Wells
- [PATCH 10/26] Mapped CCI-000139 to configure_auditd_action_mail_acct in auditing.xml
Willy Santos
- [PATCH 11/25] Mapped CCI-001494 to met_inherently.
Willy Santos
- [PATCH 11/26] Mapped CCI-000030 to requirement_unclear.
Willy Santos
- [PATCH 11/26] Mapped CCI-000030 to requirement_unclear.
Shawn Wells
- [PATCH 11/26] Mapped CCI-000159 to met_inherently in srg_support.xml
Willy Santos
- [PATCH 12/25] Mapped CCI-001495 to met_inherently.
Willy Santos
- [PATCH 12/26] Mapped CCI-000032 to requirement_unclear.
Willy Santos
- [PATCH 12/26] Mapped CCI-000032 to requirement_unclear.
Shawn Wells
- [PATCH 12/26] Mapped CCI-000371 to unmet_impractical_guidance
Willy Santos
- [PATCH 13/25] Mapped CCI-001557 to service_rsyslog_enabled
Willy Santos
- [PATCH 13/26] Mapped CCI-00034 to met_inherently.
Willy Santos
- [PATCH 13/26] Mapped CCI-00034 to met_inherently.
Shawn Wells
- [PATCH 13/26] Mapped CCI-000372 to unmet_impractical_guidance in srg_support.xml
Willy Santos
- [PATCH 14/25] Mapped CCI-000017 to new_rule_needed.
Willy Santos
- [PATCH 14/26] Mapped CCI-00035 to met_inherently.
Willy Santos
- [PATCH 14/26] Mapped CCI-00035 to met_inherently.
Shawn Wells
- [PATCH 14/26] Mapped CCI-000535 to unmet_impractical_guidance in srg_support.xml
Willy Santos
- [PATCH 15/25] Mapped CCI-000052 to new_rule_needed.
Willy Santos
- [PATCH 15/26] Mapped CCI-000537 to unmet_impractical_guidance in srg_support.xml
Willy Santos
- [PATCH 15/26] Mapped CCI-001250 to gconf_gnome_disable_automount.
Willy Santos
- [PATCH 15/26] Mapped CCI-001250 to gconf_gnome_disable_automount.
Shawn Wells
- [PATCH 16/25] Mapped CCI-000053 to new_rule_needed.
Willy Santos
- [PATCH 16/26] Mapped CCI-000085 to gconf_gnome_disable_automount.
Willy Santos
- [PATCH 16/26] Mapped CCI-000085 to gconf_gnome_disable_automount.
Shawn Wells
- [PATCH 16/26] Mapped CCI-000539 to unmet_impractical_guidance in srg_support.xml
Willy Santos
- [PATCH 17/25] Mapped CCI-000226 to met_inherently.
Willy Santos
- [PATCH 17/26] Mapped CCI-000085 to service_autofs_disabled.
Willy Santos
- [PATCH 17/26] Mapped CCI-000085 to service_autofs_disabled.
Shawn Wells
- [PATCH 17/26] Mapped CCI-000780 to unmet_impractical_guidance in srg_support.xml
Willy Santos
- [PATCH 18/25] Mapped CCI-000386 to requirement_unclear.
Willy Santos
- [PATCH 18/25] Mapped CCI-000386 to requirement_unclear.
Shawn Wells
- [PATCH 18/25] Mapped CCI-000386 to requirement_unclear.
Willy Santos
- [PATCH 18/26] Mapped CCI-000085 to bios_disable_usb_boot.
Willy Santos
- [PATCH 18/26] Mapped CCI-000085 to bios_disable_usb_boot.
Shawn Wells
- [PATCH 18/26] Mapped CCI-001682 to unmet_impractical_guidance in srg_support.xml
Willy Santos
- [PATCH 19/25] Mapped CCI-001092 to requirement_unclear.
Willy Santos
- [PATCH 19/25] Mapped CCI-001092 to requirement_unclear.
Shawn Wells
- [PATCH 19/26] Mapped CCI-000085 to bootloader_nousb_argument.
Willy Santos
- [PATCH 19/26] Mapped CCI-000085 to bootloader_nousb_argument.
Shawn Wells
- [PATCH 19/26] Mapped CCI-000879 to sshd_idle_timeout in ssh.xml
Willy Santos
- [PATCH 2/2] moved/merged discussion of some services out of base services into relevant sections
Jeffrey Blank
- [PATCH 2/2] moved/merged discussion of some services out of base services into relevant sections
Shawn Wells
- [PATCH 2/2] moved/merged discussion of some services out of base services into relevant sections
Jeffrey Blank
- [PATCH 2/2] moved/merged discussion of some services out of base services into relevant sections
Shawn Wells
- [PATCH 2/3] updates to Profiles to support auditing Rules * also removal of some Rules which don't belong in common Profile
Jeffrey Blank
- [PATCH 2/4] cleanup of prose for sysctl network parameter settings * expurgated weird CCE description text * introduced usage of new macros for XCCDF sysctl description
Jeffrey Blank
- [PATCH 2/5] Mapped CCI-000382 to principle-minimize-software
Willy Santos
- [PATCH 2/6] Mapped CCI-000140 to configure_auditd_admin_space_left_action in auditing.xml
Willy Santos
- [PATCH 2/8] Mapped CCI-001130 to network_ssl
Willy Santos
- [PATCH 2/9] Fixed placement of Value tags for max login rule.
Willy Santos
- [PATCH 20/25] Mapped CCI-00197 to requirement_unclear.
Willy Santos
- [PATCH 20/25] Mapped CCI-00197 to requirement_unclear.
Shawn Wells
- [PATCH 20/25] Mapped CCI-00197 to requirement_unclear.
Willy Santos
- [PATCH 20/26] Mapped CCI-000085 to kernel_module_usb-storage_removed.
Shawn Wells
- [PATCH 20/26] Mapped CCI-000085 to kernel_module_usb-storage_removed.
Willy Santos
- [PATCH 20/26] Mapped CCI-000880 to auditd_configure_rules in auditing.xml
Willy Santos
- [PATCH 21/25] Mapped CCI-001096 to met_inherently.
Willy Santos
- [PATCH 21/26] Mapped CCI-000085 to gconf_gnome_disable_automount.
Willy Santos
- [PATCH 21/26] Mapped CCI-000085 to gconf_gnome_disable_automount.
Shawn Wells
- [PATCH 21/26] Mapped CCI-001109 to default_iptables_policies in iptables.xml
Willy Santos
- [PATCH 22/25] Mapped CCI-001128 to network_ssl.
Willy Santos
- [PATCH 22/26] Mapped CCI-000099 to requirement_unclear.
Willy Santos
- [PATCH 22/26] Mapped CCI-000099 to requirement_unclear.
Shawn Wells
- [PATCH 22/26] Mapped CCI-001383 to unmet_impractical_guidance in srg_support.xml
Willy Santos
- [PATCH 23/25] Mapped CCI-001135 to network_ssl.
Willy Santos
- [PATCH 23/26] Mapped CCI-000157 to met_inherently.
Willy Santos
- [PATCH 23/26] Mapped CCI-000157 to met_inherently.
Shawn Wells
- [PATCH 23/26] Mapped CCI-000370 to unmet_impractical_guidance in srg_support.xml
Willy Santos
- [PATCH 24/25] Mapped CCI-001135 to package_openswan_installed.
Willy Santos
- [PATCH 24/26] Mapped CCI-000066 to unmet_impractical_guidance in srg_support.xml
Willy Santos
- [PATCH 24/26] Mapped CCI-000185 to network_ssl_enable_client_support.
Shawn Wells
- [PATCH 24/26] Mapped CCI-000185 to network_ssl_enable_client_support.
Willy Santos
- [PATCH 25/25] Mapped CCI-001135 to sshd_allow_only_protocol2.
Willy Santos
- [PATCH 25/26] Made changes requested by Jeff Blank to accommodate changes made on his commit.
Willy Santos
- [PATCH 25/26] Made changes requested by Jeff Blank to accommodate changes made on his commit.
Shawn Wells
- [PATCH 25/26] Mapped CCI-001694 to met_inherently in srg_support.xml
Willy Santos
- [PATCH 26/26] Mapped CCI-000186 to met_inherently.
Willy Santos
- [PATCH 26/26] Mapped CCI-000186 to met_inherently.
Shawn Wells
- [PATCH 26/26] Mapped CCI-001632 to ssh_server in ssh.xml
Willy Santos
- [PATCH 3/3] significant overhaul of OVAL checks for auditing * support for Values * consistent naming (which may yet be made more concise in the future) * actually tested the checks
Jeffrey Blank
- [PATCH 3/4] cleanup of prose for rsyslog logging * OVAL for these remains difficult * can we grab a filename from a text file, and then run tests on it?
Jeffrey Blank
- [PATCH 3/5] Mapped CCI-000776 to sshd_allow_only_protocol2
Willy Santos
- [PATCH 3/6] Mapped CCI-000157 to enable_auditd_service in auditing.xml
Willy Santos
- [PATCH 3/8] Mapped CCI-001131 to install_openswan
Willy Santos
- [PATCH 3/9] OVAL check for maximum login sessions rule.
Willy Santos
- [PATCH 4/4] cleanup of prose for iptables
Jeffrey Blank
- [PATCH 4/5] Mapped CCI-000774 to sshd_allow_only_protocol2
Willy Santos
- [PATCH 4/6] Mapped CCI-000162 to met_inherently in srg_support.xml
Willy Santos
- [PATCH 4/8] Mapped CCI-001131 to network_ssl
Willy Santos
- [PATCH 4/9] Mapped CCI-000158 to enable_auditd_service in auditing.xml
Willy Santos
- [PATCH 5/5] Mapped CCI-000872 to met_inherently
Willy Santos
- [PATCH 5/6] Mapped CCI-000163 to met_inherently in srg_support.xml
Willy Santos
- [PATCH 5/8] Mapped CCI-001133 to sshd_idle_timeout
Willy Santos
- [PATCH 5/9] Mapped CCI-000213 to unmet_impractical_guidance in srg_support.xml
Willy Santos
- [PATCH 6/6] Mapped CCI-000164 to met_inherently in srg_support.xml
Willy Santos
- [PATCH 6/8] Mapped CCI-001144 to sshd_use_approved_ciphers
Willy Santos
- [PATCH 6/9] Mapped CCI-000221 to unmet_impractical_guidance in srg_support.xml
Willy Santos
- [PATCH 7/8] Mapped CCI-001145 to sshd_use_approved_ciphers
Willy Santos
- [PATCH 7/9] Mapped CCI-000347 to auditd_configure_rules in auditing.xml
Willy Santos
- [PATCH 8/8] Mapped CCI-001146 to sshd_use_approved_ciphers
Willy Santos
- [PATCH 8/9] Mapped CCI-000345 to met_inherently in srg_support.xml
Willy Santos
- [PATCH 9/9] Mapped CCI-000346 to met_inherently in srg_support.xml
Willy Santos
- [PATCH] added CCIs to move OS SRG mapping forward
Jeffrey Blank
- [PATCH] added CCIs to move OS SRG mapping forward
Shawn Wells
- [PATCH] added more CCI references to Rules, to support documentation of OS SRG satisfaction
Jeffrey Blank
- [PATCH] added new Rule and check to disable inactive accounts * inactivity is defined as time following automatic password expiration * also added relevant CCI refs
Shawn Wells
- [PATCH] added new Rule and check to disable inactive accounts * inactivity is defined as time following automatic password expiration * also added relevant CCI refs
Jeffrey Blank
- [PATCH] added new Rule and check to disable inactive accounts * inactivity is defined as time following automatic password expiration * also added relevant CCI refs
Willy Santos
- [PATCH] added new Rule and check to disable inactive accounts * inactivity is defined as time following automatic password expiration * also added relevant CCI refs
Willy Santos
- [PATCH] added new Rule and check to disable inactive accounts * inactivity is defined as time following automatic password expiration * also added relevant CCI refs
Shawn Wells
- [PATCH] added new Rule and check to disable inactive accounts * inactivity is defined as time following automatic password expiration * also added relevant CCI refs
Jeffrey Blank
- [PATCH] added new Rule and check to disable inactive accounts * inactivity is defined as time following automatic password expiration * also added relevant CCI refs
Jeffrey Blank
- [PATCH] Fix login.defs syntax
Joe Nall
- [PATCH] Fix login.defs syntax
Joe Nall
- [PATCH] Fix login.defs syntax
Jeffrey Blank
- [PATCH] Future deprecation of modprobe.conf
Michael Palmiotto
- [PATCH] Future deprecation of modprobe.conf
Jeffrey Blank
- [PATCH] new Rule and check for disabling local accounts
Jeffrey Blank
- [PATCH] new transform to view RHEL 5 STIG (manual and automated portions) conveniently * a similar transform will be used to capture consensus notes
Jeffrey Blank
- [PATCH] prose cleanup of SELinux discussion
Jeffrey Blank
- [PATCH] prose cleanup of SELinux discussion
Jeffrey Blank
- [PATCH] prose cleanup of SELinux discussion
Shawn Wells
- [PATCH] prose cleanup of SELinux discussion
Shawn Wells
- [PATCH] Remove use of modprobe.conf and fix some typos.
Michael Palmiotto
- [PATCH] The single user password test is different than RHEL 5
Joe Nall
- [PATCH] transform to view RHEL 5 STIG in table
Jeffrey Blank
- [PATCH] transform to view RHEL 5 STIG in table
Shawn Wells
- [PATCH] Update bootloader password to use --encrypted instead of --md5
Shawn Wells
- JBoss Enterprise Application Platform
Kenny Peeples
- JBoss Enterprise Application Platform
Jeffrey Blank
- JBoss Enterprise Application Platform
Jeffrey Blank
- SCAP Security Guide conference bridge
Shawn Wells
- SCAP Security Guide conference bridge
Joe Wulf
- This may help some
Mackanick, Jason W CIV (US)
- This may help some
Shawn Wells
- This may help some
Simon Lukasik
- This may help some
Jeffrey Blank
- To atime or relatime?
Shawn Wells
- To atime or relatime?
Joe Nall
Last message date:
Fri Jun 29 23:03:39 UTC 2012
Archived on: Fri Jun 29 23:03:43 UTC 2012
This archive was generated by
Pipermail 0.09 (Mailman edition).