[PATCH 0/6] updates for mail server, ctrl-alt-del, typos

Jeffrey Blank blank at eclipse.ncsc.mil
Sun Oct 21 19:57:38 UTC 2012


This includes:
Rules that require use of Postfix instead of Sendmail.  Postfix
is the RHEL default now, and this will catch those who try to cling to
Sendmail.  

Addition of a Rule from the RHEL 5 STIG (updated for RHEL 6) requiring that
Ctrl-Alt-Del result in logging instead of a reboot.  This was based on
discussion that unintended reboots were occurring (since another platform uses
this key sequence) and creating availability problems.  

The transform which creates the table with CCI refs now includes the associated
NIST 800-53 refs as a separate column.

Jeffrey Blank (6):
  added new alternate titles for new Rules, removed old Rule title
  added new Rules to require Postfix not sendmail, removed path Rule
  added Rule content for Postfix vs Sendmail
  added Rule text for disabling Ctrl-Alt-Del reboots
  typo fixes
  display 800-53-refs as separate column in CCI table

 RHEL6/input/auxiliary/alt-titles-stig.xml        |   10 +++-
 RHEL6/input/profiles/STIG-server.xml             |    6 ++-
 RHEL6/input/services/mail.xml                    |   55 +++++++++++----------
 RHEL6/input/system/accounts/physical.xml         |   29 +++++++++++
 RHEL6/input/system/logging.xml                   |    2 +-
 RHEL6/input/system/software/updating.xml         |    3 +-
 RHEL6/transforms/xccdf2table-profileccirefs.xslt |   15 ++++--
 7 files changed, 84 insertions(+), 36 deletions(-)



More information about the scap-security-guide mailing list