[PATCH 14/36] Added severity medium, item not in RHEL 5 STIG.

Michele Newman mnewman at redhat.com
Thu Oct 25 13:49:59 UTC 2012


---
 RHEL6/input/system/network/kernel.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/RHEL6/input/system/network/kernel.xml b/RHEL6/input/system/network/kernel.xml
index 990ae13..2921e10 100644
--- a/RHEL6/input/system/network/kernel.xml
+++ b/RHEL6/input/system/network/kernel.xml
@@ -352,7 +352,7 @@ log size, although some activity would not be logged.</rationale>
 <tested by="DS" on="20121024"/>
 </Rule>
 
-<Rule id="set_sysctl_net_ipv4_tcp_syncookies">
+<Rule id="set_sysctl_net_ipv4_tcp_syncookies" severity="medium">
 <title>Enable Kernel Parameter to Use TCP Syncookies</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv4.tcp_syncookies" value="1" />
@@ -373,7 +373,7 @@ enables the system to continue servicing valid connection requests.
 <tested by="DS" on="20121024"/>
 </Rule>
 
-<Rule id="set_sysctl_net_ipv4_conf_all_rp_filter">
+<Rule id="set_sysctl_net_ipv4_conf_all_rp_filter" severity="medium">
 <title>Enable Kernel Parameter to Use Reverse Path Filtering for All Interfaces</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv4.conf.all.rp_filter" value="1" />
@@ -392,7 +392,7 @@ networks.</rationale>
 <tested by="DS" on="20121024"/>
 </Rule>
 
-<Rule id="set_sysctl_net_ipv4_conf_default_rp_filter">
+<Rule id="set_sysctl_net_ipv4_conf_default_rp_filter" severity="medium">
 <title>Enable Kernel Parameter to Use Reverse Path Filtering by Default</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv4.conf.default.rp_filter" value="1" />
-- 
1.8.0



More information about the scap-security-guide mailing list