[PATCH 2/2] removed checks for inetd that are inapplicable to RHEL 6 * also removed unnecessary "hidden" attribute from auxiliary Groups

Jeffrey Blank blank at eclipse.ncsc.mil
Fri May 18 22:21:00 UTC 2012


Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
 rhel6/src/input/auxiliary/srg_support.xml         |    6 +-
 rhel6/src/input/checks/package_inetd_removed.xml  |   26 ------
 rhel6/src/input/checks/service_inetd_disabled.xml |   95 ---------------------
 3 files changed, 3 insertions(+), 124 deletions(-)
 delete mode 100644 rhel6/src/input/checks/package_inetd_removed.xml
 delete mode 100644 rhel6/src/input/checks/service_inetd_disabled.xml

diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index de24ea5..bd39d09 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -6,7 +6,7 @@ those cases where Groups or Rules elsewhere in scap-security-guide do
 not clearly relate.
 </description>
 
-<Group id="met_inherently" hidden="true">
+<Group id="met_inherently">
 <title>Product Meets this Requirement</title>
 <description>
 Red Hat Enterprise Linux meets this requirement by design.
@@ -16,7 +16,7 @@ Red Hat Enterprise Linux meets this requirement by design.
 <ref disa="131" />
 </Group>
 
-<Group id="unmet_impractical_guidance" hidden="true">
+<Group id="unmet_impractical_guidance">
 <title>Guidance Does Not Meet this Requirement Due to Impracticality or Scope</title>
 <description>
 The guidance does not meet this requirement.
@@ -25,7 +25,7 @@ The requirement is impractical or out of scope.
 <ref disa="354,1094" />
 </Group>
 
-<Group id="unmet_impractical_product" hidden="true">
+<Group id="unmet_impractical_product">
 <title>Product Does Not Meet this Requirement Due to Impracticality or Scope</title>
 <description>
 The product does not meet this requirement.
diff --git a/rhel6/src/input/checks/package_inetd_removed.xml b/rhel6/src/input/checks/package_inetd_removed.xml
deleted file mode 100644
index e1728b3..0000000
--- a/rhel6/src/input/checks/package_inetd_removed.xml
+++ /dev/null
@@ -1,26 +0,0 @@
-<def-group>
-  <definition class="compliance" id="package_inetd_removed"
-  version="1">
-    <metadata>
-      <title>Package inetd Removed</title>
-      <affected family="unix">
-        <platform>Red Hat Enterprise Linux 6</platform>
-      </affected>
-      <reference ref_id="4023-8" source="CCE" />
-      <description>The RPM package inetd should be removed.</description>
-      <!-- generated by create_package_removed.py -->
-    </metadata>
-    <criteria>
-      <criterion comment="package inetd is removed"
-      test_ref="test_package_inetd_removed" />
-    </criteria>
-  </definition>
-  <linux:rpminfo_test check="all" check_existence="none_exist"
-  id="test_package_inetd_removed" version="1"
-  comment="package inetd is removed">
-    <linux:object object_ref="obj_package_inetd" />
-  </linux:rpminfo_test>
-  <linux:rpminfo_object id="obj_package_inetd" version="1">
-    <linux:name>inetd</linux:name>
-  </linux:rpminfo_object>
-</def-group>
diff --git a/rhel6/src/input/checks/service_inetd_disabled.xml b/rhel6/src/input/checks/service_inetd_disabled.xml
deleted file mode 100644
index a066c9c..0000000
--- a/rhel6/src/input/checks/service_inetd_disabled.xml
+++ /dev/null
@@ -1,95 +0,0 @@
-<def-group>
-  <definition class="compliance" id="service_inetd_disabled" version="1">
-    <metadata>
-      <title>Service inetd Disabled</title>
-      <affected family="unix">
-        <platform>Red Hat Enterprise Linux 6</platform>
-      </affected>
-      <reference ref_id="4252-3" source="CCE" />
-      <description>The inetd service should be disabled if possible.</description>
-    </metadata>
-    <criteria operator="AND" comment="service inetd is not configured to start">
-      <criterion comment="inetd runlevel 0" test_ref="test_runlevel0_inetd" />
-      <criterion comment="inetd runlevel 1" test_ref="test_runlevel1_inetd" />
-      <criterion comment="inetd runlevel 2" test_ref="test_runlevel2_inetd" />
-      <criterion comment="inetd runlevel 3" test_ref="test_runlevel3_inetd" />
-      <criterion comment="inetd runlevel 4" test_ref="test_runlevel4_inetd" />
-      <criterion comment="inetd runlevel 5" test_ref="test_runlevel5_inetd" />
-      <criterion comment="inetd runlevel 6" test_ref="test_runlevel6_inetd" />
-    </criteria>
-  </definition>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel0_inetd"
-  version="2">
-    <unix:object object_ref="obj_runlevel0_inetd" />
-    <unix:state state_ref="state_service_inetd_off" />
-  </unix:runlevel_test>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel1_inetd"
-  version="2">
-    <unix:object object_ref="obj_runlevel1_inetd" />
-    <unix:state state_ref="state_service_inetd_off" />
-  </unix:runlevel_test>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel2_inetd"
-  version="2">
-    <unix:object object_ref="obj_runlevel2_inetd" />
-    <unix:state state_ref="state_service_inetd_off" />
-  </unix:runlevel_test>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel3_inetd"
-  version="2">
-    <unix:object object_ref="obj_runlevel3_inetd" />
-    <unix:state state_ref="state_service_inetd_off" />
-  </unix:runlevel_test>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel4_inetd"
-  version="2">
-    <unix:object object_ref="obj_runlevel4_inetd" />
-    <unix:state state_ref="state_service_inetd_off" />
-  </unix:runlevel_test>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel5_inetd"
-  version="2">
-    <unix:object object_ref="obj_runlevel5_inetd" />
-    <unix:state state_ref="state_service_inetd_off" />
-  </unix:runlevel_test>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel6_inetd"
-  version="2">
-    <unix:object object_ref="obj_runlevel6_inetd" />
-    <unix:state state_ref="state_service_inetd_off" />
-  </unix:runlevel_test>
-  <unix:runlevel_object id="obj_runlevel0_inetd" version="1">
-    <unix:service_name>inetd</unix:service_name>
-    <unix:runlevel operation="equals">0</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_object id="obj_runlevel1_inetd" version="1">
-    <unix:service_name>inetd</unix:service_name>
-    <unix:runlevel operation="equals">1</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_object id="obj_runlevel2_inetd" version="1">
-    <unix:service_name>inetd</unix:service_name>
-    <unix:runlevel operation="equals">2</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_object id="obj_runlevel3_inetd" version="1">
-    <unix:service_name>inetd</unix:service_name>
-    <unix:runlevel operation="equals">3</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_object id="obj_runlevel4_inetd" version="1">
-    <unix:service_name>inetd</unix:service_name>
-    <unix:runlevel operation="equals">4</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_object id="obj_runlevel5_inetd" version="1">
-    <unix:service_name>inetd</unix:service_name>
-    <unix:runlevel operation="equals">5</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_object id="obj_runlevel6_inetd" version="1">
-    <unix:service_name>inetd</unix:service_name>
-    <unix:runlevel operation="equals">6</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_state comment="not configured to start" id="state_service_inetd_off" version="1">
-    <unix:start datatype="boolean">false</unix:start>
-    <unix:kill datatype="boolean">true</unix:kill>
-  </unix:runlevel_state>
-</def-group>
-- 
1.7.1



More information about the scap-security-guide mailing list