[PATCH 4/4] removal of CCE info from templates for kernelmods, packages, perms, services, sysctls

Jeffrey Blank blank at eclipse.ncsc.mil
Tue Sep 4 17:31:26 UTC 2012


Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
 .../templates/template_kernel_module_disabled      |    2 --
 .../checks/templates/template_package_installed    |    1 -
 .../checks/templates/template_package_removed      |    1 -
 RHEL6/input/checks/templates/template_permissions  |    1 -
 .../checks/templates/template_service_disabled     |    1 -
 .../checks/templates/template_service_enabled      |    1 -
 RHEL6/input/checks/templates/template_sysctl       |    1 -
 7 files changed, 0 insertions(+), 8 deletions(-)

diff --git a/RHEL6/input/checks/templates/template_kernel_module_disabled b/RHEL6/input/checks/templates/template_kernel_module_disabled
index 973f232..8385a76 100644
--- a/RHEL6/input/checks/templates/template_kernel_module_disabled
+++ b/RHEL6/input/checks/templates/template_kernel_module_disabled
@@ -7,9 +7,7 @@
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
-      <reference ref_id="CCEID" source="CCE" />
       <description>The kernel module KERNMODULE should be disabled.</description>
-      <!-- generated by create_kernel_modules_disabled.py -->
     </metadata>
     <criteria>
       <criterion test_ref="test_kernmod_KERNMODULE_disabled"
diff --git a/RHEL6/input/checks/templates/template_package_installed b/RHEL6/input/checks/templates/template_package_installed
index 0d7f050..d668705 100644
--- a/RHEL6/input/checks/templates/template_package_installed
+++ b/RHEL6/input/checks/templates/template_package_installed
@@ -7,7 +7,6 @@
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
-      <reference ref_id="PKGCCE" source="CCE" />
       <description>The RPM package PKGNAME should be installed.</description>
     </metadata>
     <criteria>
diff --git a/RHEL6/input/checks/templates/template_package_removed b/RHEL6/input/checks/templates/template_package_removed
index 8e8b426..ba79f4e 100644
--- a/RHEL6/input/checks/templates/template_package_removed
+++ b/RHEL6/input/checks/templates/template_package_removed
@@ -7,7 +7,6 @@
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
-      <reference ref_id="PKGCCE" source="CCE" />
       <description>The RPM package PKGNAME should be removed.</description>
     </metadata>
     <criteria>
diff --git a/RHEL6/input/checks/templates/template_permissions b/RHEL6/input/checks/templates/template_permissions
index 70d1268..c3a2c38 100644
--- a/RHEL6/input/checks/templates/template_permissions
+++ b/RHEL6/input/checks/templates/template_permissions
@@ -6,7 +6,6 @@
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
-      <reference ref_id="CCEID" source="CCE" />
       <description>This test makes sure that FILEPATH is owned by FILEUID, group owned by FILEGID, and has mode FILEMODE. If
       the target file or directory has an extended ACL then it will fail the mode check.</description>
     </metadata>
diff --git a/RHEL6/input/checks/templates/template_service_disabled b/RHEL6/input/checks/templates/template_service_disabled
index 05d0427..ed6a491 100644
--- a/RHEL6/input/checks/templates/template_service_disabled
+++ b/RHEL6/input/checks/templates/template_service_disabled
@@ -7,7 +7,6 @@
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
-      <reference ref_id="CCE_ID" source="CCE" />
       <description>The SERVICENAME service should be disabled if possible.</description>
     </metadata>
    <criteria comment="package PACKAGENAME removed or service SERVICENAME is not configured to start" operator="OR">
diff --git a/RHEL6/input/checks/templates/template_service_enabled b/RHEL6/input/checks/templates/template_service_enabled
index 8a6e361..e1fd447 100644
--- a/RHEL6/input/checks/templates/template_service_enabled
+++ b/RHEL6/input/checks/templates/template_service_enabled
@@ -7,7 +7,6 @@
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
-      <reference ref_id="CCE_ID" source="CCE" />
       <description>The SERVICENAME service should be enabled if possible.</description>
     </metadata>
     <criteria comment="package PACKAGENAME installed and service SERVICENAME is configured to start" operator="AND">
diff --git a/RHEL6/input/checks/templates/template_sysctl b/RHEL6/input/checks/templates/template_sysctl
index 1379c6a..e26f7b2 100644
--- a/RHEL6/input/checks/templates/template_sysctl
+++ b/RHEL6/input/checks/templates/template_sysctl
@@ -6,7 +6,6 @@
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
-      <reference ref_id="CCE-CCE_ID" source="CCE" />
       <description>The kernel runtime parameter "SYSCTLVAR" should be set to "SYSCTLVAL".</description>
     </metadata>
     <criteria>
-- 
1.7.1



More information about the scap-security-guide mailing list