[PATCH] Do not select the Group but the Rule.
Jeffrey Blank
blank at eclipse.ncsc.mil
Wed Nov 21 16:48:06 UTC 2012
thanks -- please push!
On 11/21/2012 07:40 AM, Simon Lukasik wrote:
> ---
> RHEL6/input/profiles/STIG-server.xml | 2 +-
> RHEL6/input/profiles/test.xml | 3 +--
> 2 files changed, 2 insertions(+), 3 deletions(-)
>
> diff --git a/RHEL6/input/profiles/STIG-server.xml b/RHEL6/input/profiles/STIG-server.xml
> index 5f67335..3fa5add 100644
> --- a/RHEL6/input/profiles/STIG-server.xml
> +++ b/RHEL6/input/profiles/STIG-server.xml
> @@ -66,7 +66,7 @@
> <refine-value idref="user_umask_value" selector="077"/>
>
>
> -<select idref="daemon_umask" selected="true" />
> +<select idref="set_daemon_umask" selected="true" />
> <refine-value idref="var_umask_for_daemons" selector="027"/>
>
>
> diff --git a/RHEL6/input/profiles/test.xml b/RHEL6/input/profiles/test.xml
> index 9f0bd50..7742b31 100644
> --- a/RHEL6/input/profiles/test.xml
> +++ b/RHEL6/input/profiles/test.xml
> @@ -9,7 +9,6 @@
> <select idref="package_rsyslog_installed" selected="true"/>
> <select idref="service_rsyslog_enabled" selected="true"/>
> <select idref="disable_vsftpd" selected="true"/>
> -<select idref="set_daemon_umask" selected="true"/>
> <select idref="set_selinux_state" selected="true"/>
> <select idref="password_require_digits" selected="true"/>
> <select idref="tftpd_uses_secure_mode" selected="true"/>
> @@ -52,7 +51,7 @@
> <refine-value idref="user_umask_value" selector="077"/>
>
>
> -<select idref="daemon_umask" selected="true" />
> +<select idref="set_daemon_umask" selected="true"/>
> <refine-value idref="var_umask_for_daemons" selector="027"/>
>
>
More information about the scap-security-guide
mailing list