[PATCH] (corrected) added config rule for SNMP

David Smith dsmith at eclipse.ncsc.mil
Wed Oct 24 16:17:16 UTC 2012


Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
 RHEL6/input/services/snmp.xml |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/services/snmp.xml b/RHEL6/input/services/snmp.xml
index 7f967df..f07587a 100644
--- a/RHEL6/input/services/snmp.xml
+++ b/RHEL6/input/services/snmp.xml
@@ -72,13 +72,13 @@ stations</li>
 <Rule id="snmpd_configuration_guidance" severity="medium">
 <title>The SNMP Service Must Use only SNMPv3 or Newer </title>
 <description>
-Edit <tt>/etc/snmpd.conf</tt>, removing any references to <tt>v1</tt>, <tt>v2c</tt>, <tt>community</tt>, or <tt>com2sec</tt>.  
+Edit <tt>/etc/snmp/snmpd.conf</tt>, removing any references to <tt>v1</tt>, <tt>v2c</tt>, <tt>community</tt>, or <tt>com2sec</tt>.  
 Upon doing that, restart the SNMP service:
 <pre># service snmpd restart</pre>
 </description>
 <ocil clause="there is output">
 To ensure only SNMPv3 or newer is used, run the following command:
-<pre># grep 'v1\|v2c\|community\|com2sec' /etc/snmpd.conf</pre>
+<pre># grep 'v1\|v2c\|community\|com2sec' /etc/snmp/snmpd.conf</pre>
 There should be no output.
 </ocil>
 <rationale>
-- 
1.7.1



More information about the scap-security-guide mailing list