[PATCH 9/9] Reworded to allow for use with RHN and RHN Satellite.

Michele Newman mnewman at redhat.com
Thu Oct 25 21:11:19 UTC 2012


---
 RHEL6/input/auxiliary/alt-titles-stig.xml | 2 +-
 RHEL6/input/services/base.xml             | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/auxiliary/alt-titles-stig.xml b/RHEL6/input/auxiliary/alt-titles-stig.xml
index c3fa7bc..9805185 100644
--- a/RHEL6/input/auxiliary/alt-titles-stig.xml
+++ b/RHEL6/input/auxiliary/alt-titles-stig.xml
@@ -513,7 +513,7 @@ The qpidd service must not be running.
 The rdisc service must not be running.
 </title>
 <title rule="service_rhnsd_disabled" shorttitle="Disable Red Hat Network Service (rhnsd)">
-The Red Hat Network Service (rhnsd) service must not be running.
+The Red Hat Network Service (rhnsd) service must not be running, unless using RHN or an RHN Satellite.
 </title>
 <title rule="service_sysstat_disabled" shorttitle="Disable System Statistics Reset Service (sysstat)">
 The sysstat service must not be running.
diff --git a/RHEL6/input/services/base.xml b/RHEL6/input/services/base.xml
index bda8350..7396512 100644
--- a/RHEL6/input/services/base.xml
+++ b/RHEL6/input/services/base.xml
@@ -405,7 +405,8 @@ RHN server or satellite and managed as such.
 <ocil><service-disable-check-macro service="rhnsd" /></ocil>
 <rationale>Although systems management and patching is extremely important to
 system security, management by a system outside the enterprise enclave is not
-desirable for some environments.</rationale>
+desirable for some environments.  However, if the system is being managed by RHN or
+ RHN Satellite Server it can remain on, otherwise disable the service. </rationale>
 <ident cce="3416-5" />
 <oval id="service_rhnsd_disabled" />
 <ref nist="CM-6, CM-7" disa="382" />
-- 
1.8.0



More information about the scap-security-guide mailing list