[PATCH 0/7] many minor changes, CCE removal from OVAL
Jeffrey Blank
blank at eclipse.ncsc.mil
Tue Sep 4 23:16:30 UTC 2012
The changes in this patchset (visible here) are minor/helpful --
however the "missing" patch 4 is the removal of CCE references
from the OVAL content (which at 325K) I did not want to send out.
We discussed the removal of those CCEs before I did it, but now know
that it will come with this push (if an ACK is forthcoming).
Jeffrey Blank (7):
added argument to output oval-results file * this will help
avoid future issues with invalid output/input
removed files which are either obsolete or are/will be created
through different mechanisms
added OVAL files which are now created through template
removed CCE references from OVAL content
added xslt template to automatically insert current date into XCCDF
* easier than manually inserting date?
added support to automatically add reference to OVAL definitions
* to document their true origin, ease some debugging
content editing for permissions section, fixups for title style
* my voyage through the content revealed to me how much other
content editing is still needed
.../checks/accounts_dangerous_path_for_root.xml | 1 -
.../checks/accounts_disable_post_pw_expiration.xml | 1 -
.../accounts_max_concurrent_login_sessions.xml | 1 -
.../checks/accounts_maximum_age_login_defs.xml | 1 -
.../checks/accounts_minimum_age_login_defs.xml | 1 -
RHEL6/input/checks/accounts_no_empty_passwords.xml | 1 -
.../accounts_no_nis_inclusions_etc_group.xml | 1 -
.../accounts_no_nis_inclusions_etc_passwd.xml | 1 -
.../accounts_no_nis_inclusions_etc_shadow.xml | 1 -
RHEL6/input/checks/accounts_no_uid_except_zero.xml | 1 -
RHEL6/input/checks/accounts_nologin_for_system.xml | 1 -
RHEL6/input/checks/accounts_pam_no_nullok.xml | 1 -
.../checks/accounts_password_all_shadowed.xml | 1 -
.../checks/accounts_password_hashing_algorithm.xml | 1 -
.../checks/accounts_password_minlen_login_defs.xml | 1 -
.../accounts_password_pam_cracklib_dcredit.xml | 1 -
.../accounts_password_pam_cracklib_difok.xml | 1 -
.../accounts_password_pam_cracklib_lcredit.xml | 1 -
.../accounts_password_pam_cracklib_ocredit.xml | 1 -
.../accounts_password_pam_cracklib_retry.xml | 1 -
.../accounts_password_pam_cracklib_ucredit.xml | 1 -
.../input/checks/accounts_password_reuse_limit.xml | 1 -
.../accounts_password_warn_age_login_defs.xml | 1 -
.../accounts_passwords_pam_faillock_deny.xml | 1 -
.../checks/accounts_passwords_pam_tally2_deny.xml | 1 -
.../checks/accounts_root_path_dirs_no_write.xml | 1 -
RHEL6/input/checks/accounts_su_wheel_only.xml | 1 -
RHEL6/input/checks/accounts_umask_bash_users.xml | 1 -
RHEL6/input/checks/accounts_umask_csh.xml | 1 -
RHEL6/input/checks/accounts_umask_etc_profile.xml | 1 -
RHEL6/input/checks/accounts_umask_login_defs.xml | 1 -
RHEL6/input/checks/accounts_wheel_exists.xml | 1 -
.../input/checks/audit_rules_dac_modification.xml | 1 -
.../checks/audit_rules_dac_modification_chmod.xml | 1 -
.../checks/audit_rules_dac_modification_chown.xml | 1 -
.../checks/audit_rules_dac_modification_fchmod.xml | 1 -
.../audit_rules_dac_modification_fchmodat.xml | 1 -
.../checks/audit_rules_dac_modification_fchown.xml | 1 -
.../audit_rules_dac_modification_fchownat.xml | 1 -
.../audit_rules_dac_modification_fremovexattr.xml | 1 -
.../audit_rules_dac_modification_fsetxattr.xml | 1 -
.../checks/audit_rules_dac_modification_lchown.xml | 1 -
.../audit_rules_dac_modification_lremovexattr.xml | 1 -
.../audit_rules_dac_modification_lsetxattr.xml | 1 -
.../audit_rules_dac_modification_removexattr.xml | 1 -
.../audit_rules_dac_modification_setxattr.xml | 1 -
.../checks/audit_rules_file_deletion_events.xml | 1 -
RHEL6/input/checks/audit_rules_immutable.xml | 1 -
.../checks/audit_rules_kernel_module_loading.xml | 1 -
RHEL6/input/checks/audit_rules_login_events.xml | 1 -
.../input/checks/audit_rules_mac_modification.xml | 1 -
RHEL6/input/checks/audit_rules_media_export.xml | 1 -
.../audit_rules_networkconfig_modification.xml | 1 -
.../checks/audit_rules_privileged_commands.xml | 1 -
.../input/checks/audit_rules_record_timechange.xml | 1 -
RHEL6/input/checks/audit_rules_session_events.xml | 1 -
.../input/checks/audit_rules_sysadmin_actions.xml | 1 -
RHEL6/input/checks/audit_rules_time_adjtimex.xml | 1 -
.../checks/audit_rules_time_clock_settime.xml | 1 -
.../input/checks/audit_rules_time_settimeofday.xml | 1 -
RHEL6/input/checks/audit_rules_time_stime.xml | 1 -
.../checks/audit_rules_time_watch_localtime.xml | 1 -
.../audit_rules_unsuccessful_file_modification.xml | 1 -
.../checks/audit_rules_usergroup_modification.xml | 1 -
.../auditd_data_retention_action_mail_acct.xml | 1 -
...ditd_data_retention_admin_space_left_action.xml | 1 -
.../checks/auditd_data_retention_max_log_file.xml | 1 -
.../auditd_data_retention_max_log_file_action.xml | 1 -
.../checks/auditd_data_retention_num_logs.xml | 1 -
.../auditd_data_retention_space_left_action.xml | 1 -
RHEL6/input/checks/banner_etc_issue.xml | 1 -
RHEL6/input/checks/banner_gui_enabled.xml | 1 -
RHEL6/input/checks/banner_gui_gdm.xml | 1 -
RHEL6/input/checks/bootloader_audit_argument.xml | 1 -
RHEL6/input/checks/bootloader_nousb_argument.xml | 1 -
RHEL6/input/checks/bootloader_password.xml | 1 -
.../console_device_restrict_access_desktop.xml | 1 -
.../console_device_restrict_access_server.xml | 1 -
.../checks/core_dump_suid_progs_limits_conf.xml | 1 -
RHEL6/input/checks/core_dumps_limitsconf.xml | 1 -
RHEL6/input/checks/cups_disable_browsing.xml | 1 -
RHEL6/input/checks/cups_disable_printserver.xml | 1 -
RHEL6/input/checks/cups_limit_browsing.xml | 1 -
.../checks/cups_limit_browsing_browseaddress.xml | 1 -
.../checks/cups_limit_browsing_browsedenyallow.xml | 1 -
RHEL6/input/checks/cups_limit_web_interface.xml | 1 -
RHEL6/input/checks/dir_perms_etc_httpd_conf.xml | 1 -
RHEL6/input/checks/dir_perms_var_log_httpd.xml | 1 -
.../dir_perms_world_writable_sticky_bits.xml | 1 -
.../dir_perms_world_writable_system_owned.xml | 1 -
.../checks/dovecot_disable_plaintext_auth.xml | 1 -
RHEL6/input/checks/dovecot_enable_ssl.xml | 1 -
.../input/checks/file_group_owner_etc_crontab.xml | 1 -
RHEL6/input/checks/file_group_owner_grub_conf.xml | 1 -
RHEL6/input/checks/file_groupowner_etc_group.xml | 1 -
RHEL6/input/checks/file_groupowner_etc_gshadow.xml | 1 -
RHEL6/input/checks/file_groupowner_etc_passwd.xml | 1 -
RHEL6/input/checks/file_groupowner_etc_shadow.xml | 1 -
.../checks/file_groupowner_ldap_server_bdb.xml | 1 -
.../checks/file_groupowner_ldap_server_files.xml | 1 -
RHEL6/input/checks/file_mode_etc_crontab.xml | 1 -
RHEL6/input/checks/file_owner_etc_group.xml | 1 -
RHEL6/input/checks/file_owner_etc_gshadow.xml | 1 -
RHEL6/input/checks/file_owner_etc_passwd.xml | 1 -
RHEL6/input/checks/file_owner_etc_shadow.xml | 1 -
RHEL6/input/checks/file_owner_ldap_server_bdb.xml | 1 -
.../input/checks/file_owner_ldap_server_files.xml | 1 -
RHEL6/input/checks/file_ownership_etc_skel.xml | 1 -
.../input/checks/file_ownership_samba_password.xml | 1 -
.../input/checks/file_ownership_var_log_audit.xml | 1 -
.../file_permissions_boot_grub_grub_conf.xml | 46 +++++++++
.../input/checks/file_permissions_etc_at_allow.xml | 37 -------
RHEL6/input/checks/file_permissions_etc_group.xml | 1 -
.../input/checks/file_permissions_etc_gshadow.xml | 1 -
RHEL6/input/checks/file_permissions_etc_passwd.xml | 58 ++++++-----
RHEL6/input/checks/file_permissions_etc_shadow.xml | 58 ++++++-----
RHEL6/input/checks/file_permissions_etc_skel.xml | 1 -
RHEL6/input/checks/file_permissions_grub_conf.xml | 1 -
RHEL6/input/checks/file_permissions_home_dirs.xml | 1 -
.../file_permissions_httpd_server_conf_files.xml | 1 -
.../checks/file_permissions_ldap_server_bdb.xml | 1 -
.../checks/file_permissions_ldap_server_files.xml | 1 -
.../checks/file_permissions_samba_password.xml | 1 -
.../checks/file_permissions_unauthorized_sgid.xml | 1 -
.../checks/file_permissions_unauthorized_suid.xml | 1 -
...ile_permissions_unauthorized_world_writable.xml | 1 -
.../input/checks/file_permissions_ungroupowned.xml | 1 -
RHEL6/input/checks/file_permissions_unowned.xml | 1 -
.../checks/file_permissions_var_log_audit.xml | 1 -
.../input/checks/file_permissions_var_log_cron.xml | 46 +++++++++
.../file_ssh_host_keys_private_permissions.xml | 1 -
.../file_ssh_host_keys_public_permissions.xml | 1 -
RHEL6/input/checks/file_user_owner_etc_crontab.xml | 1 -
RHEL6/input/checks/file_user_owner_grub_conf.xml | 1 -
.../input/checks/gconf_gnome_disable_automount.xml | 1 -
...f_gnome_screensaver_idle_activation_enabled.xml | 1 -
.../checks/gconf_gnome_screensaver_idle_delay.xml | 1 -
.../gconf_gnome_screensaver_lock_enabled.xml | 1 -
.../checks/gconf_gnome_screensaver_mode_blank.xml | 1 -
RHEL6/input/checks/interactive_boot_disable.xml | 1 -
RHEL6/input/checks/iptables_avahi_disabled.xml | 1 -
RHEL6/input/checks/iptables_cupsd_disabled.xml | 1 -
.../input/checks/iptables_default_policy_drop.xml | 1 -
RHEL6/input/checks/iptables_icmp_disabled.xml | 1 -
RHEL6/input/checks/iptables_ldap_enabled.xml | 1 -
RHEL6/input/checks/iptables_smtp_enabled.xml | 1 -
RHEL6/input/checks/iptables_sshd_disabled.xml | 1 -
.../checks/kernel_module_bluetooth_disabled.xml | 1 -
.../input/checks/kernel_module_cramfs_disabled.xml | 3 +-
RHEL6/input/checks/kernel_module_dccp_disabled.xml | 3 +-
.../checks/kernel_module_freevxfs_disabled.xml | 3 +-
RHEL6/input/checks/kernel_module_hfs_disabled.xml | 3 +-
.../checks/kernel_module_hfsplus_disabled.xml | 3 +-
.../checks/kernel_module_ipv6_option_disabled.xml | 1 -
.../input/checks/kernel_module_jffs2_disabled.xml | 3 +-
RHEL6/input/checks/kernel_module_rds_disabled.xml | 3 +-
RHEL6/input/checks/kernel_module_sctp_disabled.xml | 16 ++-
.../checks/kernel_module_squashfs_disabled.xml | 3 +-
RHEL6/input/checks/kernel_module_tipc_disabled.xml | 3 +-
RHEL6/input/checks/kernel_module_udf_disabled.xml | 3 +-
.../checks/kernel_module_usb-storage_disabled.xml | 3 +-
.../input/checks/ldap_client_pam_ldap_present.xml | 1 -
RHEL6/input/checks/ldap_client_start_tls.xml | 1 -
RHEL6/input/checks/ldap_client_tls_cacertpath.xml | 1 -
.../ldap_server_config_bdb_file_security.xml | 1 -
.../ldap_server_config_certificate_files.xml | 1 -
.../ldap_server_config_certificate_usage.xml | 1 -
.../ldap_server_config_directory_file_security.xml | 1 -
RHEL6/input/checks/ldap_server_config_logging.xml | 1 -
.../input/checks/ldap_server_config_olcaccess.xml | 1 -
.../input/checks/ldap_server_config_olcrootpw.xml | 1 -
.../ldap_server_config_olcsecurity_simple_bind.xml | 1 -
.../checks/ldap_server_config_olcsecurity_tls.xml | 1 -
.../input/checks/ldap_server_config_olcsuffix.xml | 1 -
.../ldap_server_config_olctlsciphersuite.xml | 1 -
RHEL6/input/checks/libuser_login_defs_import.xml | 1 -
RHEL6/input/checks/logrotate_rotate_all_files.xml | 1 -
.../input/checks/logwatch_configured_hostlimit.xml | 1 -
.../checks/logwatch_configured_splithosts.xml | 1 -
RHEL6/input/checks/mount_home_own_partition.xml | 1 -
RHEL6/input/checks/mount_option_dev_shm_nodev.xml | 1 -
RHEL6/input/checks/mount_option_dev_shm_noexec.xml | 1 -
RHEL6/input/checks/mount_option_dev_shm_nosuid.xml | 1 -
...mount_option_nodev_nonroot_local_partitions.xml | 1 -
RHEL6/input/checks/mount_option_nodev_on_tmp.xml | 1 -
.../mount_option_nodev_remote_filesystems.xml | 1 -
.../mount_option_nodev_removable_partitions.xml | 1 -
.../mount_option_noexec_removable_partitions.xml | 1 -
.../mount_option_nosuid_remote_filesystems.xml | 1 -
.../mount_option_nosuid_removable_partitions.xml | 1 -
.../checks/mount_option_smb_client_signing.xml | 1 -
RHEL6/input/checks/mount_option_tmp_nodev.xml | 1 -
RHEL6/input/checks/mount_option_tmp_noexec.xml | 1 -
RHEL6/input/checks/mount_option_tmp_nosuid.xml | 1 -
RHEL6/input/checks/mount_option_var_tmp_bind.xml | 1 -
RHEL6/input/checks/mount_tmp_own_partition.xml | 1 -
.../checks/mount_var_log_audit_own_partition.xml | 1 -
RHEL6/input/checks/mount_var_log_own_partition.xml | 1 -
RHEL6/input/checks/mount_var_own_partition.xml | 1 -
.../input/checks/network_ipv6_default_gateway.xml | 1 -
.../checks/network_ipv6_disable_interfaces.xml | 1 -
RHEL6/input/checks/network_ipv6_disable_rpc.xml | 1 -
RHEL6/input/checks/network_ipv6_limit_requests.xml | 7 --
.../checks/network_ipv6_privacy_extensions.xml | 1 -
RHEL6/input/checks/network_ipv6_static_address.xml | 1 -
RHEL6/input/checks/network_sniffer_disabled.xml | 1 -
RHEL6/input/checks/no_rsh_trusted_host_files.xml | 1 -
RHEL6/input/checks/ntp_remote_server.xml | 1 -
RHEL6/input/checks/package_abrt_removed.xml | 3 +-
RHEL6/input/checks/package_acpid_removed.xml | 3 +-
RHEL6/input/checks/package_aide_installed.xml | 3 +-
RHEL6/input/checks/package_at_removed.xml | 3 +-
RHEL6/input/checks/package_audit_installed.xml | 3 +-
RHEL6/input/checks/package_autofs_removed.xml | 3 +-
RHEL6/input/checks/package_bind_removed.xml | 3 +-
RHEL6/input/checks/package_certmonger_removed.xml | 3 +-
RHEL6/input/checks/package_cpuspeed_removed.xml | 3 +-
.../checks/package_cronie-anacron_removed.xml | 3 +-
RHEL6/input/checks/package_cronie_installed.xml | 3 +-
RHEL6/input/checks/package_cups_removed.xml | 3 +-
RHEL6/input/checks/package_cyrus-sasl_removed.xml | 3 +-
RHEL6/input/checks/package_dbus_removed.xml | 3 +-
RHEL6/input/checks/package_dhcp_removed.xml | 3 +-
RHEL6/input/checks/package_dhcpd_removed.xml | 26 +++---
RHEL6/input/checks/package_dovecot_removed.xml | 3 +-
RHEL6/input/checks/package_hal_removed.xml | 3 +-
RHEL6/input/checks/package_httpd_removed.xml | 3 +-
.../input/checks/package_initscripts_installed.xml | 1 -
.../input/checks/package_ipsec-tools_installed.xml | 3 +-
.../checks/package_iptables-ipv6_installed.xml | 3 +-
RHEL6/input/checks/package_iptables_installed.xml | 3 +-
RHEL6/input/checks/package_iputils_removed.xml | 20 ++--
RHEL6/input/checks/package_irda-utils_removed.xml | 3 +-
.../input/checks/package_irqbalance_installed.xml | 3 +-
.../input/checks/package_isdn4k-utils_removed.xml | 3 +-
RHEL6/input/checks/package_kexec-tools_removed.xml | 3 +-
RHEL6/input/checks/package_libcgroup_removed.xml | 3 +-
RHEL6/input/checks/package_lvm2_installed.xml | 3 +-
RHEL6/input/checks/package_mdadm_removed.xml | 3 +-
RHEL6/input/checks/package_net-snmp_removed.xml | 3 +-
RHEL6/input/checks/package_nfs-utils_removed.xml | 3 +-
RHEL6/input/checks/package_ntp_installed.xml | 3 +-
RHEL6/input/checks/package_ntpdate_installed.xml | 3 +-
RHEL6/input/checks/package_oddjob_removed.xml | 3 +-
.../checks/package_openldap-servers_installed.xml | 4 +-
.../checks/package_openldap-servers_removed.xml | 8 +-
RHEL6/input/checks/package_openldap_removed.xml | 3 +-
.../checks/package_openssh-server_removed.xml | 3 +-
RHEL6/input/checks/package_openswan_installed.xml | 3 +-
RHEL6/input/checks/package_pam_ccreds_removed.xml | 27 -----
RHEL6/input/checks/package_pam_ldap_removed.xml | 11 +-
.../checks/package_policycoreutils_installed.xml | 3 +-
RHEL6/input/checks/package_portreserve_removed.xml | 3 +-
RHEL6/input/checks/package_postfix_installed.xml | 3 +-
RHEL6/input/checks/package_psacct_installed.xml | 3 +-
.../checks/package_qpid-cpp-server_removed.xml | 1 -
RHEL6/input/checks/package_quota_removed.xml | 3 +-
.../input/checks/package_rhn_gpgkey_installed.xml | 28 +++---
RHEL6/input/checks/package_rhnsd_removed.xml | 3 +-
RHEL6/input/checks/package_rpcbind_removed.xml | 3 +-
RHEL6/input/checks/package_rsh-server_removed.xml | 3 +-
RHEL6/input/checks/package_rsh_removed.xml | 3 +-
RHEL6/input/checks/package_rsyslog_installed.xml | 3 +-
.../input/checks/package_samba-common_removed.xml | 3 +-
RHEL6/input/checks/package_samba_removed.xml | 3 +-
RHEL6/input/checks/package_sendmail_removed.xml | 3 +-
.../input/checks/package_smartmontools_removed.xml | 3 +-
RHEL6/input/checks/package_squid_removed.xml | 3 +-
RHEL6/input/checks/package_sssd_removed.xml | 3 +-
.../package_subscription-manager_removed.xml | 1 -
RHEL6/input/checks/package_sysstat_removed.xml | 3 +-
RHEL6/input/checks/package_talk-server_removed.xml | 3 +-
RHEL6/input/checks/package_talk_removed.xml | 3 +-
.../input/checks/package_telnet-server_removed.xml | 3 +-
RHEL6/input/checks/package_tftp-server_removed.xml | 3 +-
RHEL6/input/checks/package_vlock_installed.xml | 24 ++---
RHEL6/input/checks/package_vlock_removed.xml | 3 +-
RHEL6/input/checks/package_vsftpd_installed.xml | 8 +-
RHEL6/input/checks/package_vsftpd_removed.xml | 3 +-
RHEL6/input/checks/package_xinetd_removed.xml | 3 +-
.../package_xorg-x11-server-common_removed.xml | 1 -
RHEL6/input/checks/package_ypbind_removed.xml | 3 +-
RHEL6/input/checks/package_ypserv_removed.xml | 3 +-
RHEL6/input/checks/postfix_certificate_files.xml | 1 -
RHEL6/input/checks/postfix_logging.xml | 1 -
.../checks/postfix_network_listening_disabled.xml | 1 -
RHEL6/input/checks/postfix_server_banner.xml | 1 -
.../checks/postfix_server_denial_of_service.xml | 1 -
...tfix_server_mail_relay_for_trusted_networks.xml | 1 -
...server_mail_relay_require_tls_for_smtp_auth.xml | 1 -
...tfix_server_mail_relay_set_trusted_networks.xml | 1 -
...mail_relay_smtp_auth_for_untrusted_networks.xml | 1 -
RHEL6/input/checks/rpm_verify_hashes.xml | 1 -
RHEL6/input/checks/rpm_verify_permissions.xml | 1 -
.../checks/rsyslog_files_exist_permissions.xml | 1 -
.../input/checks/rsyslog_files_groupownership.xml | 1 -
RHEL6/input/checks/rsyslog_files_ownership.xml | 1 -
RHEL6/input/checks/rsyslog_files_permissions.xml | 1 -
RHEL6/input/checks/rsyslog_nolisten.xml | 1 -
RHEL6/input/checks/rsyslog_remote_loghost.xml | 1 -
RHEL6/input/checks/securetty_no_serial.xml | 1 -
.../checks/securetty_root_login_console_only.xml | 1 -
.../checks/selinux_all_devicefiles_labeled.xml | 1 -
.../checks/selinux_bootloader_notdisabled.xml | 1 -
RHEL6/input/checks/selinux_mode.xml | 1 -
RHEL6/input/checks/selinux_policytype.xml | 1 -
RHEL6/input/checks/service_abrtd_disabled.xml | 1 -
RHEL6/input/checks/service_acpid_disabled.xml | 1 -
RHEL6/input/checks/service_atd_disabled.xml | 1 -
RHEL6/input/checks/service_auditd_enabled.xml | 1 -
RHEL6/input/checks/service_autofs_disabled.xml | 1 -
.../input/checks/service_avahi-daemon_disabled.xml | 1 -
RHEL6/input/checks/service_bluetooth_disabled.xml | 1 -
RHEL6/input/checks/service_certmonger_disabled.xml | 1 -
RHEL6/input/checks/service_cgconfig_disabled.xml | 1 -
RHEL6/input/checks/service_cgred_disabled.xml | 1 -
RHEL6/input/checks/service_cpuspeed_disabled.xml | 1 -
RHEL6/input/checks/service_crond_enabled.xml | 1 -
RHEL6/input/checks/service_cups_disabled.xml | 1 -
RHEL6/input/checks/service_dhcpd_disabled.xml | 1 -
RHEL6/input/checks/service_dovecot_disabled.xml | 1 -
RHEL6/input/checks/service_haldaemon_disabled.xml | 1 -
RHEL6/input/checks/service_httpd_disabled.xml | 1 -
RHEL6/input/checks/service_ip6tables_enabled.xml | 1 -
RHEL6/input/checks/service_iptables_enabled.xml | 1 -
RHEL6/input/checks/service_irqbalance_enabled.xml | 1 -
RHEL6/input/checks/service_isdn_disabled.xml | 1 -
RHEL6/input/checks/service_kdump_disabled.xml | 1 -
.../input/checks/service_lvm2-monitor_enabled.xml | 1 -
RHEL6/input/checks/service_mcstrans_disabled.xml | 1 -
RHEL6/input/checks/service_mdmonitor_disabled.xml | 1 -
RHEL6/input/checks/service_messagebus_disabled.xml | 1 -
RHEL6/input/checks/service_named_disabled.xml | 1 -
RHEL6/input/checks/service_netconsole_disabled.xml | 1 -
RHEL6/input/checks/service_netfs_disabled.xml | 1 -
RHEL6/input/checks/service_network_enabled.xml | 1 -
RHEL6/input/checks/service_nfs_disabled.xml | 1 -
RHEL6/input/checks/service_nfslock_disabled.xml | 1 -
RHEL6/input/checks/service_ntpd_enabled.xml | 1 -
RHEL6/input/checks/service_ntpdate_enabled.xml | 103 --------------------
RHEL6/input/checks/service_oddjobd_disabled.xml | 1 -
.../input/checks/service_portreserve_disabled.xml | 1 -
RHEL6/input/checks/service_postfix_enabled.xml | 1 -
RHEL6/input/checks/service_psacct_enabled.xml | 1 -
RHEL6/input/checks/service_qpidd_disabled.xml | 7 +-
RHEL6/input/checks/service_quota_nld_disabled.xml | 1 -
RHEL6/input/checks/service_rdisc_disabled.xml | 1 -
RHEL6/input/checks/service_restorecond_enabled.xml | 1 -
RHEL6/input/checks/service_rexec_disabled.xml | 1 -
RHEL6/input/checks/service_rhnsd_disabled.xml | 1 -
RHEL6/input/checks/service_rhsmcertd_disabled.xml | 1 -
RHEL6/input/checks/service_rlogin_disabled.xml | 1 -
RHEL6/input/checks/service_rpcbind_disabled.xml | 1 -
RHEL6/input/checks/service_rpcgssd_disabled.xml | 1 -
RHEL6/input/checks/service_rpcidmapd_disabled.xml | 1 -
RHEL6/input/checks/service_rpcsvcgssd_disabled.xml | 1 -
RHEL6/input/checks/service_rsh_disabled.xml | 1 -
RHEL6/input/checks/service_rsyslog_enabled.xml | 1 -
RHEL6/input/checks/service_saslauthd_disabled.xml | 1 -
RHEL6/input/checks/service_sendmail_disabled.xml | 1 -
RHEL6/input/checks/service_smartd_disabled.xml | 1 -
RHEL6/input/checks/service_smb_disabled.xml | 1 -
RHEL6/input/checks/service_snmpd_disabled.xml | 1 -
RHEL6/input/checks/service_squid_disabled.xml | 1 -
RHEL6/input/checks/service_sshd_disabled.xml | 1 -
RHEL6/input/checks/service_sssd_disabled.xml | 1 -
RHEL6/input/checks/service_sysstat_disabled.xml | 1 -
RHEL6/input/checks/service_telnet_disabled.xml | 1 -
RHEL6/input/checks/service_telnetd_disabled.xml | 1 -
RHEL6/input/checks/service_tftp_disabled.xml | 1 -
RHEL6/input/checks/service_vsftpd_disabled.xml | 1 -
RHEL6/input/checks/service_xinetd_disabled.xml | 1 -
RHEL6/input/checks/service_ypbind_disabled.xml | 1 -
RHEL6/input/checks/service_ypserv_disabled.xml | 1 -
RHEL6/input/checks/singleuser_password.xml | 1 -
RHEL6/input/checks/smb_client_signing_smb_conf.xml | 1 -
RHEL6/input/checks/sshd_banner_set.xml | 1 -
RHEL6/input/checks/sshd_clientalivecountmax.xml | 1 -
.../input/checks/sshd_hostbasedauthentication.xml | 1 -
RHEL6/input/checks/sshd_idle_timeout.xml | 1 -
RHEL6/input/checks/sshd_no_user_envset.xml | 1 -
.../input/checks/sshd_permitemptypasswords_no.xml | 1 -
RHEL6/input/checks/sshd_permitrootlogin_no.xml | 1 -
RHEL6/input/checks/sshd_protocol_2.xml | 1 -
RHEL6/input/checks/sshd_rsh_emulation_disabled.xml | 1 -
RHEL6/input/checks/sshd_use_approved_ciphers.xml | 1 -
RHEL6/input/checks/sysconfig_ipv6_autoconf.xml | 1 -
RHEL6/input/checks/sysconfig_ipv6_disable.xml | 1 -
RHEL6/input/checks/sysconfig_ipv6_networking.xml | 1 -
.../sysconfig_networking_bootproto_ifcfg.xml | 1 -
.../checks/sysconfig_networking_ipv6_ifcfg.xml | 1 -
RHEL6/input/checks/sysconfig_nozeroconf_yes.xml | 1 -
RHEL6/input/checks/sysctl_kernel_exec_shield.xml | 3 +-
.../checks/sysctl_kernel_randomize_va_space.xml | 3 +-
.../sysctl_net_ipv4_conf_all_accept_redirects.xml | 1 -
...ysctl_net_ipv4_conf_all_accept_source_route.xml | 1 -
.../sysctl_net_ipv4_conf_all_log_martians.xml | 3 +-
.../checks/sysctl_net_ipv4_conf_all_rp_filter.xml | 3 +-
.../sysctl_net_ipv4_conf_all_secure_redirects.xml | 1 -
.../sysctl_net_ipv4_conf_all_send_redirects.xml | 1 -
...sctl_net_ipv4_conf_default_accept_redirects.xml | 1 -
...l_net_ipv4_conf_default_accept_source_route.xml | 1 -
.../sysctl_net_ipv4_conf_default_rp_filter.xml | 3 +-
...sctl_net_ipv4_conf_default_secure_redirects.xml | 1 -
...sysctl_net_ipv4_conf_default_send_redirects.xml | 1 -
...sysctl_net_ipv4_icmp_echo_ignore_broadcasts.xml | 3 +-
..._net_ipv4_icmp_ignore_bogus_error_responses.xml | 3 +-
RHEL6/input/checks/sysctl_net_ipv4_ip_forward.xml | 3 +-
.../checks/sysctl_net_ipv4_tcp_syncookies.xml | 3 +-
.../sysctl_net_ipv6_conf_all_disable_ipv6.xml | 1 -
.../sysctl_net_ipv6_conf_default_accept_ra.xml | 1 -
...sctl_net_ipv6_conf_default_accept_ra_defrtr.xml | 1 -
...ysctl_net_ipv6_conf_default_accept_ra_pinfo.xml | 1 -
...tl_net_ipv6_conf_default_accept_ra_rtr_pref.xml | 1 -
...sctl_net_ipv6_conf_default_accept_redirects.xml | 1 -
.../sysctl_net_ipv6_conf_default_autoconf.xml | 1 -
.../sysctl_net_ipv6_conf_default_dad_transmits.xml | 1 -
.../sysctl_net_ipv6_conf_default_max_addresses.xml | 1 -
..._net_ipv6_conf_default_router_solicitations.xml | 1 -
RHEL6/input/checks/sysctl_net_ipv6_disabled.xml | 1 -
RHEL6/input/checks/testcheck.py | 2 +-
RHEL6/input/checks/tftpd_uses_secure_mode.xml | 1 -
RHEL6/input/checks/umask_for_daemons.xml | 1 -
RHEL6/input/checks/wireless_disable_drivers.xml | 1 -
RHEL6/input/checks/wireless_disable_interfaces.xml | 1 -
RHEL6/input/checks/xwindows_remote_listening.xml | 1 -
RHEL6/input/checks/xwindows_runlevel_setting.xml | 1 -
.../checks/yum_gpgcheck_global_activation.xml | 1 -
RHEL6/input/checks/yum_gpgcheck_never_disabled.xml | 1 -
RHEL6/input/services/cron.xml | 2 +-
RHEL6/input/services/dhcp.xml | 6 +-
RHEL6/input/services/dns.xml | 14 ++-
RHEL6/input/services/imap.xml | 5 +-
RHEL6/input/services/ldap.xml | 6 +-
RHEL6/input/services/squid.xml | 4 +-
RHEL6/input/services/xorg.xml | 4 +-
RHEL6/input/system/accounts/session.xml | 2 +-
RHEL6/input/system/auditing.xml | 17 ++--
RHEL6/input/system/permissions/execution.xml | 2 +-
RHEL6/input/system/permissions/files.xml | 103 +++++++++++---------
RHEL6/input/system/permissions/mounting.xml | 2 +-
RHEL6/input/system/selinux.xml | 4 +-
RHEL6/input/system/software/updating.xml | 4 +-
RHEL6/transforms/idtranslate.py | 14 ++-
RHEL6/transforms/relabelids.py | 2 +-
RHEL6/transforms/shorthand2xccdf.xslt | 9 ++-
446 files changed, 429 insertions(+), 881 deletions(-)
create mode 100644 RHEL6/input/checks/file_permissions_boot_grub_grub_conf.xml
delete mode 100644 RHEL6/input/checks/file_permissions_etc_at_allow.xml
create mode 100644 RHEL6/input/checks/file_permissions_var_log_cron.xml
delete mode 100644 RHEL6/input/checks/package_pam_ccreds_removed.xml
delete mode 100644 RHEL6/input/checks/service_ntpdate_enabled.xml
More information about the scap-security-guide
mailing list