[PATCH 03/13] DISA FSO

Shawn Wells shawn at redhat.com
Fri Nov 16 22:58:24 UTC 2012


On 11/16/12 5:54 PM, Shawn Wells wrote:
>
> 0003-DISA-FSO-Copy-editing-of-Avahi-section.patch
>
>
>  From 2a61a559641866602df30eb638f31ae0b149b87e Mon Sep 17 00:00:00 2001
> From: Shawn Wells<shawn at redhat.com>
> Date: Fri, 16 Nov 2012 06:55:58 -0500
> Subject: [PATCH 03/13] DISA FSO: Copy editing of Avahi section
>   DISA FSO provided copy editing of the Avahi section
>
> ---
>   RHEL6/input/services/avahi.xml |   12 ++++++------
>   1 files changed, 6 insertions(+), 6 deletions(-)
>
> diff --git a/RHEL6/input/services/avahi.xml b/RHEL6/input/services/avahi.xml
> index c4112b7..af7dd1c 100644
> --- a/RHEL6/input/services/avahi.xml
> +++ b/RHEL6/input/services/avahi.xml
> @@ -50,9 +50,9 @@http://www.avahi.org  for more detailed information about the configuration optio
>   <title>Serve Avahi Only via Required Protocol</title>
>   <description>
>   If you are using only IPv4, edit <tt>/etc/avahi/avahi-daemon.conf</tt> and ensure
> -the following line exists in the <tt>[server]</tt> section:
> +the following line exists in the <tt>[server]</tt> section.
>   <pre>use-ipv6=no</pre>
> -Similarly, if you are using only IPv6, disable IPv4 sockets with the line:
> +Similarly, if you are using only IPv6, disable IPv4 sockets with the line.
>   <pre>use-ipv4=no</pre>
>   </description>
>   <ref nist="CM-6, CM-7" />
> @@ -83,7 +83,7 @@ are not permitted.
>   <title>Prevent Other Programs from Using Avahi's Port</title>
>   <description>
>   To prevent other mDNS stacks from running, edit <tt>/etc/avahi/avahi-daemon.conf</tt>
> -and ensure the following line appears in the <tt>[server]</tt> section:
> +and ensure the following line appears in the <tt>[server]</tt> section.
>   <pre>disallow-other-stacks=yes</pre>
>   </description>
>   <rationale>
> @@ -98,7 +98,7 @@ that port on the system.
>   <title>Disable Avahi Publishing</title>
>   <description>
>   To prevent other mDNS stacks from running, edit <tt>/etc/avahi/avahi-daemon.conf</tt>
> -and ensure the following line appears in the <tt>[server]</tt> section:
> +and ensure the following line appears in the <tt>[server]</tt> section.
>   <pre>disallow-other-stacks=yes</pre>
>   </description>
>   <rationale>
> @@ -116,10 +116,10 @@ If it is necessary to publish some information to the network, it should not be
>   by any extraneous information, or by information supplied by a non-trusted source
>   on the system.
>   Prevent user applications from using Avahi to publish services by adding or
> -correcting the following line in the <tt>[publish]</tt> section:
> +correcting the following line in the <tt>[publish]</tt> section.
>   <pre>disable-user-service-publishing=yes</pre>
>   Implement as many of the following lines as possible, to restrict the information
> -published by Avahi:
> +published by Avahi.
>   <pre>publish-addresses=no
>   publish-hinfo=no
>   publish-workstation=no
> -- 1.7.1

Ack

(note these patches were created by FSO, not myself. I only posted 
publicly.)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20121116/2f80cb59/attachment.html>


More information about the scap-security-guide mailing list