[PATCH 13/36] Added severity medium, same as the RHEL 5 STIG.

Michele Newman mnewman at redhat.com
Thu Oct 25 13:49:58 UTC 2012


---
 RHEL6/input/system/network/kernel.xml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/RHEL6/input/system/network/kernel.xml b/RHEL6/input/system/network/kernel.xml
index e3b27a3..990ae13 100644
--- a/RHEL6/input/system/network/kernel.xml
+++ b/RHEL6/input/system/network/kernel.xml
@@ -11,7 +11,7 @@ which affect networking and have security implications are described here.
 kernel parameters ensure that the host will not perform routing
 of network traffic.</description>
 
-<Rule id="disable_sysctl_ipv4_default_send_redirects">
+<Rule id="disable_sysctl_ipv4_default_send_redirects" severity="medium">
 <title>Disable Kernel Parameter for Sending ICMP Redirects by Default</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv4.conf.default.send_redirects" value="0" />
@@ -28,7 +28,7 @@ only appropriate for routers.</rationale>
 <tested by="DS" on="20121024"/>
 </Rule>
 
-<Rule id="disable_sysctl_ipv4_all_send_redirects">
+<Rule id="disable_sysctl_ipv4_all_send_redirects" severity="medium">
 <title>Disable Kernel Parameter for Sending ICMP Redirects for All Interfaces</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv4.conf.all.send_redirects" value="0" />
@@ -45,7 +45,7 @@ only appropriate for routers.</rationale>
 <tested by="DS" on="20121024"/>
 </Rule>
 
-<Rule id="disable_sysctl_ipv4_ip_forward">
+<Rule id="disable_sysctl_ipv4_ip_forward" severity="medium">
 <title>Disable Kernel Parameter for IP Forwarding</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv4.ip_forward" value="0" />
@@ -63,7 +63,7 @@ only appropriate for routers.</rationale>
 </Rule>
 </Group>
 
-<Group id="network_host_and_router_parameters">
+<Group id="network_host_and_router_parameters" severity="medium">
 <title>Network Related Kernel Runtime Parameters for Hosts and Routers</title>
 <description>Certain kernel parameters should be set for systems which are
 acting as either hosts or routers to improve the system's ability defend
@@ -197,7 +197,7 @@ operator="equals" interactive="0">
 <value selector="disabled">0</value>
 </Value>
 
-<Rule id="set_sysctl_net_ipv4_conf_all_accept_source_route">
+<Rule id="set_sysctl_net_ipv4_conf_all_accept_source_route" severity="medium">
 <title>Disable Kernel Parameter for Accepting Source-Routed Packets for All Interfaces</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv4.conf.all.accept_source_route" value="0" />
@@ -213,7 +213,7 @@ uses. It should be disabled unless it is absolutely required.</rationale>
 <tested by="DS" on="20121024"/>
 </Rule>
 
-<Rule id="set_sysctl_net_ipv4_conf_all_accept_redirects">
+<Rule id="set_sysctl_net_ipv4_conf_all_accept_redirects" severity="medium">
 <title>Disable Kernel Parameter for Accepting ICMP Redirects for All Interfaces</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv4.conf.all.accept_redirects" value="0" />
@@ -230,7 +230,7 @@ uses. It should be disabled unless it is absolutely required.</rationale>
 </Rule>
 
 
-<Rule id="set_sysctl_net_ipv4_conf_all_secure_redirects">
+<Rule id="set_sysctl_net_ipv4_conf_all_secure_redirects" severity="medium">
 <title>Disable Kernel Parameter for Accepting Secure Redirects for All Interfaces</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv4.conf.all.secure_redirects" value="0" />
@@ -266,7 +266,7 @@ to be detected.</rationale>
 </Rule>
 
 
-<Rule id="set_sysctl_net_ipv4_conf_default_accept_source_route">
+<Rule id="set_sysctl_net_ipv4_conf_default_accept_source_route" severity="medium">
 <title>Disable Kernel Parameter for Accepting Source-Routed Packets By Default</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv4.conf.default.accept_source_route" value="0" />
@@ -300,7 +300,7 @@ uses. It should be disabled unless it is absolutely required.</rationale>
 </Rule>
 
 
-<Rule id="set_sysctl_net_ipv4_conf_default_secure_redirects">
+<Rule id="set_sysctl_net_ipv4_conf_default_secure_redirects" severity="medium">
 <title>Disable Kernel Parameter for Accepting Secure Redirects By Default</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv4.conf.default.secure_redirects" value="0" />
-- 
1.8.0



More information about the scap-security-guide mailing list