[PATCH 2/2] added RPM verify back in -- oops!

Jeffrey Blank blank at eclipse.ncsc.mil
Thu Oct 25 21:10:38 UTC 2012


Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
 RHEL6/input/profiles/STIG-server.xml |    2 ++
 RHEL6/input/profiles/common.xml      |    1 -
 2 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/profiles/STIG-server.xml b/RHEL6/input/profiles/STIG-server.xml
index 2350dd0..b361774 100644
--- a/RHEL6/input/profiles/STIG-server.xml
+++ b/RHEL6/input/profiles/STIG-server.xml
@@ -2,6 +2,8 @@
 <title>Pre-release Draft STIG for RHEL 6 Server</title>
 <description>This profile is being developed under the DoD consensus model to become a STIG in coordination with DISA FSO.</description>
 
+<select idref="rpm_verify_permissions" selected="true"/>
+
 <select idref="install_antivirus" selected="true"/>
 <select idref="install_hids" selected="true"/>
 
diff --git a/RHEL6/input/profiles/common.xml b/RHEL6/input/profiles/common.xml
index a5108f6..d240dbd 100644
--- a/RHEL6/input/profiles/common.xml
+++ b/RHEL6/input/profiles/common.xml
@@ -12,7 +12,6 @@
 <select idref="ensure_gpgcheck_globally_activated" selected="true"/>
 <select idref="ensure_gpgcheck_never_disabled" selected="true"/>
 <select idref="install_aide" selected="true"/>
-<!--<select idref="rpm_verify_permissions" selected="true"/>-->
 <select idref="enable_selinux_bootloader" selected="true"/>
 <select idref="no_rsh_trust_files" selected="true"/>
 <select idref="set_selinux_state" selected="true"/>
-- 
1.7.1



More information about the scap-security-guide mailing list