[PATCH 9/9] Reworded to allow for use with RHN and RHN Satellite.
Shawn Wells
shawn at redhat.com
Thu Oct 25 21:24:07 UTC 2012
On 10/25/12 5:11 PM, Michele Newman wrote:
> ---
> RHEL6/input/auxiliary/alt-titles-stig.xml | 2 +-
> RHEL6/input/services/base.xml | 3 ++-
> 2 files changed, 3 insertions(+), 2 deletions(-)
>
> diff --git a/RHEL6/input/auxiliary/alt-titles-stig.xml b/RHEL6/input/auxiliary/alt-titles-stig.xml
> index c3fa7bc..9805185 100644
> --- a/RHEL6/input/auxiliary/alt-titles-stig.xml
> +++ b/RHEL6/input/auxiliary/alt-titles-stig.xml
> @@ -513,7 +513,7 @@ The qpidd service must not be running.
> The rdisc service must not be running.
> </title>
> <title rule="service_rhnsd_disabled" shorttitle="Disable Red Hat Network Service (rhnsd)">
> -The Red Hat Network Service (rhnsd) service must not be running.
> +The Red Hat Network Service (rhnsd) service must not be running, unless using RHN or an RHN Satellite.
> </title>
> <title rule="service_sysstat_disabled" shorttitle="Disable System Statistics Reset Service (sysstat)">
> The sysstat service must not be running.
> diff --git a/RHEL6/input/services/base.xml b/RHEL6/input/services/base.xml
> index bda8350..7396512 100644
> --- a/RHEL6/input/services/base.xml
> +++ b/RHEL6/input/services/base.xml
> @@ -405,7 +405,8 @@ RHN server or satellite and managed as such.
> <ocil><service-disable-check-macro service="rhnsd" /></ocil>
> <rationale>Although systems management and patching is extremely important to
> system security, management by a system outside the enterprise enclave is not
> -desirable for some environments.</rationale>
> +desirable for some environments. However, if the system is being managed by RHN or
> + RHN Satellite Server it can remain on, otherwise disable the service. </rationale>
> <ident cce="3416-5" />
> <oval id="service_rhnsd_disabled" />
> <ref nist="CM-6, CM-7" disa="382" />
Please resubmit with refined language.
"it" should be "the rhnsd daemon" and the "otherwise..." text isn't needed.
More information about the scap-security-guide
mailing list