[PATCH] Do not select the Group but the Rule.

Jeffrey Blank blank at eclipse.ncsc.mil
Wed Nov 21 16:48:06 UTC 2012


thanks -- please push!


On 11/21/2012 07:40 AM, Simon Lukasik wrote:
> ---
>  RHEL6/input/profiles/STIG-server.xml |    2 +-
>  RHEL6/input/profiles/test.xml        |    3 +--
>  2 files changed, 2 insertions(+), 3 deletions(-)
> 
> diff --git a/RHEL6/input/profiles/STIG-server.xml b/RHEL6/input/profiles/STIG-server.xml
> index 5f67335..3fa5add 100644
> --- a/RHEL6/input/profiles/STIG-server.xml
> +++ b/RHEL6/input/profiles/STIG-server.xml
> @@ -66,7 +66,7 @@
>  <refine-value idref="user_umask_value" selector="077"/>
>  
>  
> -<select idref="daemon_umask" selected="true" />
> +<select idref="set_daemon_umask" selected="true" />
>  <refine-value idref="var_umask_for_daemons" selector="027"/>
>  
>  
> diff --git a/RHEL6/input/profiles/test.xml b/RHEL6/input/profiles/test.xml
> index 9f0bd50..7742b31 100644
> --- a/RHEL6/input/profiles/test.xml
> +++ b/RHEL6/input/profiles/test.xml
> @@ -9,7 +9,6 @@
>  <select idref="package_rsyslog_installed" selected="true"/>
>  <select idref="service_rsyslog_enabled" selected="true"/>
>  <select idref="disable_vsftpd" selected="true"/>
> -<select idref="set_daemon_umask" selected="true"/>
>  <select idref="set_selinux_state" selected="true"/>
>  <select idref="password_require_digits" selected="true"/>
>  <select idref="tftpd_uses_secure_mode" selected="true"/>
> @@ -52,7 +51,7 @@
>  <refine-value idref="user_umask_value" selector="077"/>
>  
>  
> -<select idref="daemon_umask" selected="true" />
> +<select idref="set_daemon_umask" selected="true"/>
>  <refine-value idref="var_umask_for_daemons" selector="027"/>
>  
>  


More information about the scap-security-guide mailing list