[PATCH 3/4] removed CCE identifiers from template source-info files

Jeffrey Blank blank at eclipse.ncsc.mil
Tue Sep 4 17:31:25 UTC 2012


Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
 .../checks/templates/file_dir_permissions.csv      |    7 +-
 .../checks/templates/kernel_modules_disabled.csv   |   24 ++--
 .../input/checks/templates/packages_installed.csv  |   34 ++++---
 RHEL6/input/checks/templates/packages_removed.csv  |  106 ++++++++++----------
 RHEL6/input/checks/templates/services_disabled.csv |  103 ++++++++++----------
 RHEL6/input/checks/templates/services_enabled.csv  |   24 ++--
 RHEL6/input/checks/templates/sysctl_values.csv     |   36 +++----
 7 files changed, 169 insertions(+), 165 deletions(-)

diff --git a/RHEL6/input/checks/templates/file_dir_permissions.csv b/RHEL6/input/checks/templates/file_dir_permissions.csv
index 1efaf7d..781f413 100644
--- a/RHEL6/input/checks/templates/file_dir_permissions.csv
+++ b/RHEL6/input/checks/templates/file_dir_permissions.csv
@@ -1,4 +1,3 @@
-/etc,at.allow,0,0,0600,
-/etc,cron.allow,0,0,0600,
-/boot/grub,grub.conf,0,0,0600,
-/var/log,cron,0,0,0600,
+/etc,shadow,0,0,0000
+/etc,passwd,0,0,0644
+/boot/grub,grub.conf,0,0,0600
diff --git a/RHEL6/input/checks/templates/kernel_modules_disabled.csv b/RHEL6/input/checks/templates/kernel_modules_disabled.csv
index 80bfc4f..1310316 100644
--- a/RHEL6/input/checks/templates/kernel_modules_disabled.csv
+++ b/RHEL6/input/checks/templates/kernel_modules_disabled.csv
@@ -1,12 +1,12 @@
-cramfs,14089-7
-dccp,14268-7
-freevxfs,14457-6
-hfs,15087-0
-hfsplus,14093-9
-jffs2,14853-6
-rds,14027-7
-sctp,14132-5
-squashfs,14118-4
-tipc,14911-2
-udf,14871-8
-usb-storage,4187-1
+cramfs
+dccp
+freevxfs
+hfs
+hfsplus
+jffs2
+rds
+sctp
+squashfs
+tipc
+udf
+usb-storage
diff --git a/RHEL6/input/checks/templates/packages_installed.csv b/RHEL6/input/checks/templates/packages_installed.csv
index cb7a5ba..0028011 100644
--- a/RHEL6/input/checks/templates/packages_installed.csv
+++ b/RHEL6/input/checks/templates/packages_installed.csv
@@ -1,15 +1,19 @@
-aide,4209-3
-audit,
-cronie,
-ipsec-tools,18031-5
-iptables,
-iptables-ipv6,
-irqbalance,
-lvm2,
-ntpdate,
-ntp,
-openswan,
-policycoreutils,
-postfix,14068-1
-psacct,
-rsyslog,17742-8
+aide
+audit
+cronie
+ipsec-tools
+iptables
+iptables-ipv6
+irqbalance
+lvm2
+ntpdate
+ntp
+openldap-servers
+openswan
+policycoreutils
+postfix
+psacct
+rhn_gpgkey
+rsyslog
+vlock
+vsftpd
diff --git a/RHEL6/input/checks/templates/packages_removed.csv b/RHEL6/input/checks/templates/packages_removed.csv
index 931acab..697f658 100644
--- a/RHEL6/input/checks/templates/packages_removed.csv
+++ b/RHEL6/input/checks/templates/packages_removed.csv
@@ -1,52 +1,54 @@
-abrt,
-acpid,
-at,
-autofs,
-bind,4219-2 
-certmonger,
-cpuspeed,
-cronie-anacron,
-cups,
-cyrus-sasl,
-dbus,
-dhcp,4464-4 
-dovecot,4239-0
-hal,
-httpd,4514-6 
-inetd,4023-8
-irda-utils,17504-2
-isdn4k-utils,14825-4
-kexec-tools,
-libcgroup,
-mdadm,
-net-snmp,4404-0
-nfs-utils,
-oddjob,
-openldap,
-openssh-server,
-pam_ccreds,17250-2 
-portreserve,
-qpid-cpp-server,
-quota,
-rhnsd,
-rpcbind,
-rsh,4308-3
-rsh-server,
-samba-common,
-samba,
-sendmail,14495-6
-smartmontools,
-squid,4076-6
-sssd,
-subscription-manager,
-sysstat,
-talk,18200-6
-talk-server,18151-1
-telnet-server,4330-7
-tftp-server,3916-4
-vlock,3910-7
-vsftpd,14881-7
-xinetd,4164-0
-xorg-x11-server-common,4422-2
-ypbind,
-ypserv,
+abrt
+acpid
+at
+autofs
+bind
+certmonger
+cpuspeed
+cronie-anacron
+cups
+cyrus-sasl
+dbus
+dhcp
+dhcpd
+dovecot
+hal
+httpd
+iputils
+irda-utils
+isdn4k-utils
+kexec-tools
+libcgroup
+mdadm
+net-snmp
+nfs-utils
+oddjob
+openldap
+openldap-servers
+openssh-server
+pam_ldap
+portreserve
+qpid-cpp-server
+quota
+rhnsd
+rpcbind
+rsh
+rsh-server
+samba-common
+samba
+sendmail
+smartmontools
+squid
+sssd
+subscription-manager
+sysstat
+talk
+talk-server
+telnet-server
+tftp-server
+vlock
+vsftpd
+xinetd
+xorg-x11-server-common
+ypbind
+ypserv
diff --git a/RHEL6/input/checks/templates/services_disabled.csv b/RHEL6/input/checks/templates/services_disabled.csv
index 32d93a4..ac10178 100644
--- a/RHEL6/input/checks/templates/services_disabled.csv
+++ b/RHEL6/input/checks/templates/services_disabled.csv
@@ -1,51 +1,52 @@
-abrtd,,
-acpid,,
-autofs,,
-certmonger,,
-cgred,,
-sssd,,
-telnetd,,
-atd,at,4298-6
-avahi-daemon,,4365-3
-bluetooth,,4355-4
-cgconfig,libcgroup,
-cpuspeed,cpuspeed,
-cups,cups,
-dhcpd,dhcp,4336-4
-dovecot,dovecot,3847-1
-haldaemon,hal,
-httpd,httpd,4338-0
-isdn,isdn4k-utils,4286-1
-kdump,kexec-tools,
-mcstrans,,3668-1
-mdmonitor,mdadm,
-messagebus,dbus,
-named,bind,3578-2
-netconsole,,
-netfs,,
-nfs,nfs-utils,
-nfslock,nfs-utils,
-oddjobd,oddjob,
-portreserve,portreserve,
-quota_nld,quota,
-rdisc,iputils,
-rhnsd,rhnsd,3416-5
-rhsmcertd,subscription-manager,
-rpcbind,rpcbind,
-rpcgssd,nfs-utils,
-rpcidmapd,nfs-utils,
-rpcsvcgssd,nfs-utils,
-saslauthd,cyrus-sasl,
-sendmail,sendmail,4416-4
-smartd,smartmontools,
-smb,,4551-8
-snmpd,net-snmp,3765-5
-squid,squid,4556-7
-sshd,openssh-server,4268-9
-sysstat,sysstat,
-telnet,telnet-server,3390-2
-tftp,tftp-server,4273-9
-vsftpd,vsftpd,3919-8
-xinetd,xinetd,4252-3
-ypbind,ypbind,4072-5
-ypserv,ypserv,3705-1
+abrtd,
+acpid,
+autofs,
+certmonger,
+cgred,
+sssd,
+telnetd,
+atd,at
+avahi-daemon,
+bluetooth,
+cgconfig,libcgroup
+cpuspeed,cpuspeed
+cups,cups
+dhcpd,dhcp
+dovecot,dovecot
+haldaemon,hal
+httpd,httpd
+isdn,isdn4k-utils
+kdump,kexec-tools
+mcstrans,
+mdmonitor,mdadm
+messagebus,dbus
+named,bind
+netconsole,
+netfs,
+nfs,nfs-utils
+nfslock,nfs-utils
+oddjobd,oddjob
+portreserve,portreserve
+qpidd,qpid-cpp-server
+quota_nld,quota
+rdisc,iputils
+rhnsd,rhnsd
+rhsmcertd,subscription-manager
+rpcbind,rpcbind
+rpcgssd,nfs-utils
+rpcidmapd,nfs-utils
+rpcsvcgssd,nfs-utils
+saslauthd,cyrus-sasl
+sendmail,sendmail
+smartd,smartmontools
+smb,
+snmpd,net-snmp
+squid,squid
+sshd,openssh-server
+sysstat,sysstat
+telnet,telnet-server
+tftp,tftp-server
+vsftpd,vsftpd
+xinetd,xinetd
+ypbind,ypbind
+ypserv,ypserv
diff --git a/RHEL6/input/checks/templates/services_enabled.csv b/RHEL6/input/checks/templates/services_enabled.csv
index ae9a13b..b96d288 100644
--- a/RHEL6/input/checks/templates/services_enabled.csv
+++ b/RHEL6/input/checks/templates/services_enabled.csv
@@ -1,12 +1,12 @@
-auditd,audit,4292-9
-crond,cronie,4324-0
-ip6tables,iptables-ipv6,4167-3
-iptables,iptables,4189-7
-irqbalance,irqbalance,4123-6
-lvm2-monitor,lvm2,
-network,initscripts,4369-5
-ntpd,ntp,4376-0
-postfix,postfix,14068-1
-psacct,psacct,
-restorecond,policycoreutils,4129-3
-rsyslog,rsyslog,17698-2
+auditd,audit
+crond,cronie
+ip6tables,iptables-ipv6
+iptables,iptables
+irqbalance,irqbalance
+lvm2-monitor,lvm2
+network,initscripts
+ntpd,ntp
+postfix,postfix
+psacct,psacct
+restorecond,policycoreutils
+rsyslog,rsyslog
diff --git a/RHEL6/input/checks/templates/sysctl_values.csv b/RHEL6/input/checks/templates/sysctl_values.csv
index 75e2c6a..00d6b9a 100644
--- a/RHEL6/input/checks/templates/sysctl_values.csv
+++ b/RHEL6/input/checks/templates/sysctl_values.csv
@@ -1,19 +1,17 @@
-kernel.exec-shield,1,4168-1
-kernel.randomize_va_space,1,4146-7
-net.ipv4.conf.all.accept_redirects,0,4217-6
-net.ipv4.conf.all.accept_source_route,0,4236-6
-net.ipv4.conf.all.log_martians,1,4320-8
-net.ipv4.conf.all.rp_filter,1,4080-8
-net.ipv4.conf.all.secure_redirects,0,3472-8
-net.ipv4.conf.all.send_redirects,0,4155-8
-net.ipv4.conf.default.accept_redirects,0,4186-3
-net.ipv4.conf.default.accept_source_route,0,4091-5
-net.ipv4.conf.default.rp_filter,1,3840-6
-net.ipv4.conf.default.secure_redirects,0,3339-9
-net.ipv4.conf.default.send_redirects,0,4151-7
-net.ipv4.icmp_echo_ignore_broadcasts,1,3644-2
-net.ipv4.icmp_ignore_bogus_error_responses,1,4133-5
-net.ipv4.ip_forward,0,3561-8
-net.ipv4.tcp_syncookies,1,4265-5
-net.ipv6.conf.all.disable_ipv6,1,4298-6
-net.ipv6.conf.default.accept_redirects,0,4365-3
+kernel.exec-shield,1
+kernel.randomize_va_space,1
+net.ipv4.conf.all.accept_redirects,0
+net.ipv4.conf.all.accept_source_route,0
+net.ipv4.conf.all.log_martians,1
+net.ipv4.conf.all.rp_filter,1
+net.ipv4.conf.all.secure_redirects,0
+net.ipv4.conf.all.send_redirects,0
+net.ipv4.conf.default.accept_redirects,0
+net.ipv4.conf.default.accept_source_route,0
+net.ipv4.conf.default.rp_filter,1
+net.ipv4.conf.default.secure_redirects,0
+net.ipv4.conf.default.send_redirects,0
+net.ipv4.icmp_echo_ignore_broadcasts,1
+net.ipv4.icmp_ignore_bogus_error_responses,1
+net.ipv4.ip_forward,0
+net.ipv4.tcp_syncookies,1
-- 
1.7.1



More information about the scap-security-guide mailing list