[PATCH 1/2] additional QA work

David Smith dsmith at eclipse.ncsc.mil
Thu Oct 25 21:45:20 UTC 2012


Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
 RHEL6/input/services/nfs.xml            |    4 ++++
 RHEL6/input/services/xorg.xml           |    2 ++
 RHEL6/input/system/network/wireless.xml |    3 +++
 3 files changed, 9 insertions(+), 0 deletions(-)

diff --git a/RHEL6/input/services/nfs.xml b/RHEL6/input/services/nfs.xml
index b2b1627..487afd1 100644
--- a/RHEL6/input/services/nfs.xml
+++ b/RHEL6/input/services/nfs.xml
@@ -302,6 +302,7 @@ If properly configured, the output should look like:
 <rationale>Unnecessary services should be disabled to decrease the attack surface of the system.</rationale>
 <ident cce="4473-5" />
 <oval id="service_nfs_disabled" />
+<tested by="DS" on="20121025"/>
 </Rule>
 
 <Rule id="service_rpcsvcgssd_disabled">
@@ -319,6 +320,7 @@ RPC then this service should be disabled.
 <ident cce="4473-5" />
 <ident cce="4491-7" />
 <oval id="service_rpcsvcgssd_disabled" />
+<tested by="DS" on="20121025"/>
 </Rule>
 </Group>
 
@@ -350,6 +352,7 @@ All NFS mounts should show the <tt>nodev</tt> setting in parentheses.
 should not present device files to users.</rationale>
 <ident cce="4368-7" />
 <oval id="mount_option_nodev_remote_filesystems" />
+<tested by="DS" on="20121025"/>
 </Rule>
 
 <Rule id="use_nosuid_option_on_nfs_mounts" severity="medium">
@@ -366,6 +369,7 @@ All NFS mounts should show the <tt>nosuid</tt> setting in parentheses.
 should be installed to their default location on the local filesystem.</rationale>
 <ident cce="4024-6" />
 <oval id="mount_option_nosuid_remote_filesystems" />
+<tested by="DS" on="20121025"/>
 </Rule>
 
 </Group>
diff --git a/RHEL6/input/services/xorg.xml b/RHEL6/input/services/xorg.xml
index 6f68b8c..c032654 100644
--- a/RHEL6/input/services/xorg.xml
+++ b/RHEL6/input/services/xorg.xml
@@ -30,6 +30,7 @@ The output should show the following:
 <ident cce="4462-8" />
 <oval id="xwindows_runlevel_setting" />
 <ref disa="366" />
+<tested by="DS" on="20121025"/>
 </Rule>
 
 
@@ -50,6 +51,7 @@ The output should be:
 <ident cce="4422-2" />
 <oval id="package_xorg-x11-server-common_removed" />
 <ref disa="366" />
+<tested by="DS" on="20121025"/>
 </Rule>
 
 <!-- to add: guidance in /etc/gdm/custom.conf for xdmcp disable, tcplisten disable -->
diff --git a/RHEL6/input/system/network/wireless.xml b/RHEL6/input/system/network/wireless.xml
index 110c70b..e53e0f7 100644
--- a/RHEL6/input/system/network/wireless.xml
+++ b/RHEL6/input/system/network/wireless.xml
@@ -66,6 +66,7 @@ protocols which were not designed with security in mind.
 <ident cce="4276-2" />
 <oval id="wireless_disable_interfaces" />
 <ref nist="CM-7" disa="85" />
+<tested by="DS" on="20121025"/>
 </Rule>
 <!--
 <Rule id="wireless_disable_drivers">
@@ -100,6 +101,7 @@ utility of Bluetooth connectivity and its limited range.</rationale>
 <ident cce="4355-4" />
 <oval id="service_bluetooth_disabled" />
 <ref nist="AC-18, CM-6, CM-7" disa="85,1551" />
+<tested by="DS" on="20121025"/>
 </Rule>
 
 <Rule id="kernel_module_bluetooth_disabled" severity="medium">
@@ -121,6 +123,7 @@ activation.</rationale>
 <ident cce="14948-4" />
 <oval id="kernel_module_bluetooth_disabled" />
 <ref nist="AC-18, CM-6, CM-7" disa="85,1551" />
+<tested by="DS" on="20121025"/>
 </Rule>
 
 
-- 
1.7.1



More information about the scap-security-guide mailing list