[PATCH] (corrected) added config rule for SNMP
Shawn Wells
shawn at redhat.com
Wed Oct 24 17:00:11 UTC 2012
On 10/24/12 12:17 PM, David Smith wrote:
> Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
> ---
> RHEL6/input/services/snmp.xml | 4 ++--
> 1 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/RHEL6/input/services/snmp.xml b/RHEL6/input/services/snmp.xml
> index 7f967df..f07587a 100644
> --- a/RHEL6/input/services/snmp.xml
> +++ b/RHEL6/input/services/snmp.xml
> @@ -72,13 +72,13 @@ stations</li>
> <Rule id="snmpd_configuration_guidance" severity="medium">
> <title>The SNMP Service Must Use only SNMPv3 or Newer </title>
> <description>
> -Edit <tt>/etc/snmpd.conf</tt>, removing any references to <tt>v1</tt>, <tt>v2c</tt>, <tt>community</tt>, or <tt>com2sec</tt>.
> +Edit <tt>/etc/snmp/snmpd.conf</tt>, removing any references to <tt>v1</tt>, <tt>v2c</tt>, <tt>community</tt>, or <tt>com2sec</tt>.
> Upon doing that, restart the SNMP service:
> <pre># service snmpd restart</pre>
> </description>
> <ocil clause="there is output">
> To ensure only SNMPv3 or newer is used, run the following command:
> -<pre># grep 'v1\|v2c\|community\|com2sec' /etc/snmpd.conf</pre>
> +<pre># grep 'v1\|v2c\|community\|com2sec' /etc/snmp/snmpd.conf</pre>
> There should be no output.
> </ocil>
> <rationale>
Ack
--
Shawn Wells
Technical Director,
U.S. Intelligence Programs
(e) shawn at redhat.com
(c) 443.534.0130
More information about the scap-security-guide
mailing list