[PATCH] (corrected) added config rule for SNMP

Shawn Wells shawn at redhat.com
Wed Oct 24 17:00:11 UTC 2012


On 10/24/12 12:17 PM, David Smith wrote:
> Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
> ---
>   RHEL6/input/services/snmp.xml |    4 ++--
>   1 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/RHEL6/input/services/snmp.xml b/RHEL6/input/services/snmp.xml
> index 7f967df..f07587a 100644
> --- a/RHEL6/input/services/snmp.xml
> +++ b/RHEL6/input/services/snmp.xml
> @@ -72,13 +72,13 @@ stations</li>
>   <Rule id="snmpd_configuration_guidance" severity="medium">
>   <title>The SNMP Service Must Use only SNMPv3 or Newer </title>
>   <description>
> -Edit <tt>/etc/snmpd.conf</tt>, removing any references to <tt>v1</tt>, <tt>v2c</tt>, <tt>community</tt>, or <tt>com2sec</tt>.
> +Edit <tt>/etc/snmp/snmpd.conf</tt>, removing any references to <tt>v1</tt>, <tt>v2c</tt>, <tt>community</tt>, or <tt>com2sec</tt>.
>   Upon doing that, restart the SNMP service:
>   <pre># service snmpd restart</pre>
>   </description>
>   <ocil clause="there is output">
>   To ensure only SNMPv3 or newer is used, run the following command:
> -<pre># grep 'v1\|v2c\|community\|com2sec' /etc/snmpd.conf</pre>
> +<pre># grep 'v1\|v2c\|community\|com2sec' /etc/snmp/snmpd.conf</pre>
>   There should be no output.
>   </ocil>
>   <rationale>

Ack

-- 
Shawn Wells
Technical Director,
U.S. Intelligence Programs
(e) shawn at redhat.com
(c) 443.534.0130



More information about the scap-security-guide mailing list