[PATCH 0/8] content editing, transforms to STIG format, RPM fixes

Jeffrey Blank blank at eclipse.ncsc.mil
Tue Oct 9 15:09:29 UTC 2012


This patchset includes a significant body of content editing
to ensure checks/fixes are discrete and comprehensible,
and compatible with the conventions of written English.

It also includes additional transforms to put the content in the
structure seen in a STIG (viz. the Benchmark is a list of Groups,
each of which contains one Rule), as well as a transform to output
this to CSV (which is hopefully only a temporary need).

Some of these transforms depend on the OpenSCAP XCCDF resolve
functionality, for which a bugfix is underway (see OpenSCAP list --
thanks to Peter and Martin).



Jeffrey Blank (8):
  updated RPM specfile Requires/BuildRequires, change installation
    directory
  out unicode, out!!!  somebody needs to use a real text editor or stop
    copying/pasting      * fancy characters are nice, but are causing
    trouble for some transforms
  more unicode cleanup.  hmmm perhaps we need a git commit hook...
  added new file that can transform XCCDF Rules into CSV
  added Makerules and updated transforms to create STIG-specific
    content
  updating transform to show STIG-structured XCCDF as a table
  temporary fixups to shorthand macros, still need to improve further
  comprehensive content (and some copy) editing to XCCDF in system/
    directory

 RHEL6/Makefile                                     |   12 +++-
 .../input/checks/audit_rules_mac_modification.xml  |    4 +-
 .../audit_rules_networkconfig_modification.xml     |    2 +-
 .../input/checks/gconf_gnome_disable_automount.xml |    2 +-
 .../input/checks/ldap_server_config_olcaccess.xml  |    4 +-
 .../checks/yum_gpgcheck_global_activation.xml      |    2 +-
 RHEL6/input/services/avahi.xml                     |    2 +-
 RHEL6/input/services/base.xml                      |    2 +-
 RHEL6/input/services/dhcp.xml                      |    8 +-
 RHEL6/input/services/dns.xml                       |    6 +-
 RHEL6/input/services/ftp.xml                       |    8 +-
 RHEL6/input/services/http.xml                      |    6 +-
 RHEL6/input/services/ldap.xml                      |   20 ++--
 RHEL6/input/services/mail.xml                      |   14 ++--
 RHEL6/input/services/nfs.xml                       |    4 +-
 RHEL6/input/services/snmp.xml                      |    2 +-
 RHEL6/input/services/ssh.xml                       |    4 +-
 RHEL6/input/system/accounts/banners.xml            |   34 ++++++--
 RHEL6/input/system/accounts/pam.xml                |   77 +++++++++++------
 RHEL6/input/system/accounts/physical.xml           |   20 +++--
 .../accounts/restrictions/password_expiration.xml  |   11 +--
 .../system/accounts/restrictions/root_logins.xml   |   89 +++++---------------
 RHEL6/input/system/auditing.xml                    |   28 +++---
 RHEL6/input/system/network/iptables.xml            |    8 +-
 RHEL6/input/system/network/network.xml             |    2 +-
 RHEL6/input/system/network/ssl.xml                 |   12 ++--
 RHEL6/input/system/network/uncommon.xml            |    2 +-
 RHEL6/input/system/permissions/files.xml           |   18 ++++-
 RHEL6/input/system/permissions/mounting.xml        |   42 +++++++---
 RHEL6/input/system/permissions/permissions.xml     |    2 +-
 RHEL6/input/system/selinux.xml                     |   20 ++--
 RHEL6/input/system/software/disk_partitioning.xml  |    2 +-
 RHEL6/input/system/software/integrity.xml          |    8 +-
 RHEL6/input/system/software/updating.xml           |   26 ++++--
 RHEL6/transforms/constants.xslt                    |    1 +
 RHEL6/transforms/shorthand2xccdf.xslt              |   32 +++++--
 RHEL6/transforms/xccdf-addrefs.xslt                |   21 +++++
 RHEL6/transforms/xccdf2csv-stig.py                 |   56 ++++++++++++
 RHEL6/transforms/xccdf2stigformat.xslt             |   73 ++++++++++++----
 RHEL6/transforms/xccdf2table-profileccirefs.xslt   |    4 +-
 RHEL6/transforms/xccdf2table-stig.xslt             |   34 +++++---
 scap-security-guide.spec                           |   16 +++-
 42 files changed, 469 insertions(+), 271 deletions(-)
 create mode 100755 RHEL6/transforms/xccdf2csv-stig.py



More information about the scap-security-guide mailing list