[PATCH 13/36] Added severity medium, same as the RHEL 5 STIG.
Michele Newman
mnewman at redhat.com
Thu Oct 25 13:49:58 UTC 2012
---
RHEL6/input/system/network/kernel.xml | 18 +++++++++---------
1 file changed, 9 insertions(+), 9 deletions(-)
diff --git a/RHEL6/input/system/network/kernel.xml b/RHEL6/input/system/network/kernel.xml
index e3b27a3..990ae13 100644
--- a/RHEL6/input/system/network/kernel.xml
+++ b/RHEL6/input/system/network/kernel.xml
@@ -11,7 +11,7 @@ which affect networking and have security implications are described here.
kernel parameters ensure that the host will not perform routing
of network traffic.</description>
-<Rule id="disable_sysctl_ipv4_default_send_redirects">
+<Rule id="disable_sysctl_ipv4_default_send_redirects" severity="medium">
<title>Disable Kernel Parameter for Sending ICMP Redirects by Default</title>
<description>
<sysctl-desc-macro sysctl="net.ipv4.conf.default.send_redirects" value="0" />
@@ -28,7 +28,7 @@ only appropriate for routers.</rationale>
<tested by="DS" on="20121024"/>
</Rule>
-<Rule id="disable_sysctl_ipv4_all_send_redirects">
+<Rule id="disable_sysctl_ipv4_all_send_redirects" severity="medium">
<title>Disable Kernel Parameter for Sending ICMP Redirects for All Interfaces</title>
<description>
<sysctl-desc-macro sysctl="net.ipv4.conf.all.send_redirects" value="0" />
@@ -45,7 +45,7 @@ only appropriate for routers.</rationale>
<tested by="DS" on="20121024"/>
</Rule>
-<Rule id="disable_sysctl_ipv4_ip_forward">
+<Rule id="disable_sysctl_ipv4_ip_forward" severity="medium">
<title>Disable Kernel Parameter for IP Forwarding</title>
<description>
<sysctl-desc-macro sysctl="net.ipv4.ip_forward" value="0" />
@@ -63,7 +63,7 @@ only appropriate for routers.</rationale>
</Rule>
</Group>
-<Group id="network_host_and_router_parameters">
+<Group id="network_host_and_router_parameters" severity="medium">
<title>Network Related Kernel Runtime Parameters for Hosts and Routers</title>
<description>Certain kernel parameters should be set for systems which are
acting as either hosts or routers to improve the system's ability defend
@@ -197,7 +197,7 @@ operator="equals" interactive="0">
<value selector="disabled">0</value>
</Value>
-<Rule id="set_sysctl_net_ipv4_conf_all_accept_source_route">
+<Rule id="set_sysctl_net_ipv4_conf_all_accept_source_route" severity="medium">
<title>Disable Kernel Parameter for Accepting Source-Routed Packets for All Interfaces</title>
<description>
<sysctl-desc-macro sysctl="net.ipv4.conf.all.accept_source_route" value="0" />
@@ -213,7 +213,7 @@ uses. It should be disabled unless it is absolutely required.</rationale>
<tested by="DS" on="20121024"/>
</Rule>
-<Rule id="set_sysctl_net_ipv4_conf_all_accept_redirects">
+<Rule id="set_sysctl_net_ipv4_conf_all_accept_redirects" severity="medium">
<title>Disable Kernel Parameter for Accepting ICMP Redirects for All Interfaces</title>
<description>
<sysctl-desc-macro sysctl="net.ipv4.conf.all.accept_redirects" value="0" />
@@ -230,7 +230,7 @@ uses. It should be disabled unless it is absolutely required.</rationale>
</Rule>
-<Rule id="set_sysctl_net_ipv4_conf_all_secure_redirects">
+<Rule id="set_sysctl_net_ipv4_conf_all_secure_redirects" severity="medium">
<title>Disable Kernel Parameter for Accepting Secure Redirects for All Interfaces</title>
<description>
<sysctl-desc-macro sysctl="net.ipv4.conf.all.secure_redirects" value="0" />
@@ -266,7 +266,7 @@ to be detected.</rationale>
</Rule>
-<Rule id="set_sysctl_net_ipv4_conf_default_accept_source_route">
+<Rule id="set_sysctl_net_ipv4_conf_default_accept_source_route" severity="medium">
<title>Disable Kernel Parameter for Accepting Source-Routed Packets By Default</title>
<description>
<sysctl-desc-macro sysctl="net.ipv4.conf.default.accept_source_route" value="0" />
@@ -300,7 +300,7 @@ uses. It should be disabled unless it is absolutely required.</rationale>
</Rule>
-<Rule id="set_sysctl_net_ipv4_conf_default_secure_redirects">
+<Rule id="set_sysctl_net_ipv4_conf_default_secure_redirects" severity="medium">
<title>Disable Kernel Parameter for Accepting Secure Redirects By Default</title>
<description>
<sysctl-desc-macro sysctl="net.ipv4.conf.default.secure_redirects" value="0" />
--
1.8.0
More information about the scap-security-guide
mailing list