[PATCH 9/9] Reworded to allow for use with RHN and RHN Satellite.

Shawn Wells shawn at redhat.com
Thu Oct 25 21:24:07 UTC 2012


On 10/25/12 5:11 PM, Michele Newman wrote:
> ---
>   RHEL6/input/auxiliary/alt-titles-stig.xml | 2 +-
>   RHEL6/input/services/base.xml             | 3 ++-
>   2 files changed, 3 insertions(+), 2 deletions(-)
>
> diff --git a/RHEL6/input/auxiliary/alt-titles-stig.xml b/RHEL6/input/auxiliary/alt-titles-stig.xml
> index c3fa7bc..9805185 100644
> --- a/RHEL6/input/auxiliary/alt-titles-stig.xml
> +++ b/RHEL6/input/auxiliary/alt-titles-stig.xml
> @@ -513,7 +513,7 @@ The qpidd service must not be running.
>   The rdisc service must not be running.
>   </title>
>   <title rule="service_rhnsd_disabled" shorttitle="Disable Red Hat Network Service (rhnsd)">
> -The Red Hat Network Service (rhnsd) service must not be running.
> +The Red Hat Network Service (rhnsd) service must not be running, unless using RHN or an RHN Satellite.
>   </title>
>   <title rule="service_sysstat_disabled" shorttitle="Disable System Statistics Reset Service (sysstat)">
>   The sysstat service must not be running.
> diff --git a/RHEL6/input/services/base.xml b/RHEL6/input/services/base.xml
> index bda8350..7396512 100644
> --- a/RHEL6/input/services/base.xml
> +++ b/RHEL6/input/services/base.xml
> @@ -405,7 +405,8 @@ RHN server or satellite and managed as such.
>   <ocil><service-disable-check-macro service="rhnsd" /></ocil>
>   <rationale>Although systems management and patching is extremely important to
>   system security, management by a system outside the enterprise enclave is not
> -desirable for some environments.</rationale>
> +desirable for some environments.  However, if the system is being managed by RHN or
> + RHN Satellite Server it can remain on, otherwise disable the service. </rationale>
>   <ident cce="3416-5" />
>   <oval id="service_rhnsd_disabled" />
>   <ref nist="CM-6, CM-7" disa="382" />

Please resubmit with refined language.

"it" should be "the rhnsd daemon" and the "otherwise..." text isn't needed.


More information about the scap-security-guide mailing list