[PATCH] Update for/of service-disable-check-macro

Jeffrey Blank blank at eclipse.ncsc.mil
Wed Oct 3 13:01:42 UTC 2012


NACK.  That's not what this is about.



On 10/02/2012 12:57 PM, Michael J. McConachie wrote:
> All:
> 
> I tweaked the macro to facilitate the idea that service(s) that
> are deemed necessary to disable -- may/may not apply to all environments.
> 
> The reasoning for this is that the way it was worded previously, it appeared
> that they should be disabled, when in fact it is all contingent on the
> environment, climate, and mission.
> 
> EX: of how it looks NOW:
> 
> -----------------------------------
> For pre-determined environments, it is prudent to check that the rhnsd
> service is disabled at boot time via chkconfig and not currently running
> on the system (runtime configuration). Run the following command to
> verify rhnsd is disabled through current runtime configuration:
> 
> # service rhnsd status
> 
> If the service is disabled, the command will return:
> 
> rhnsd is stopped
> 
> Run the following command to verify rhnsd is disabled through system
> boot configuration:
> 
> # chkconfig rhnsd --list
> 
> Output should indicate the rhnsd service has been disabled at all
> runlevels, as shown in the example below:
> 
> # chkconfig rhnsd --list
> rhnsd       0:off   1:off   2:off   3:off   4:off   5:off   6:off
> 
> 
> If the service is running, this is a finding. 
> -----------------------------------
> 
> 
> 
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide


More information about the scap-security-guide mailing list