[PATCH 2/7] removed files which are either obsolete or are/will be created through different mechanisms

Jeffrey Blank blank at eclipse.ncsc.mil
Tue Sep 4 23:16:32 UTC 2012


Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
 .../input/checks/file_permissions_etc_at_allow.xml |   37 -------
 RHEL6/input/checks/package_pam_ccreds_removed.xml  |   27 -----
 RHEL6/input/checks/service_ntpdate_enabled.xml     |  103 --------------------
 3 files changed, 0 insertions(+), 167 deletions(-)
 delete mode 100644 RHEL6/input/checks/file_permissions_etc_at_allow.xml
 delete mode 100644 RHEL6/input/checks/package_pam_ccreds_removed.xml
 delete mode 100644 RHEL6/input/checks/service_ntpdate_enabled.xml

diff --git a/RHEL6/input/checks/file_permissions_etc_at_allow.xml b/RHEL6/input/checks/file_permissions_etc_at_allow.xml
deleted file mode 100644
index 9078dd2..0000000
--- a/RHEL6/input/checks/file_permissions_etc_at_allow.xml
+++ /dev/null
@@ -1,37 +0,0 @@
-<def-group>
-  <definition class="compliance" id="file_permissions_etc_at_allow" version="1">
-    <metadata>
-      <title>Verify /etc/at.allow Permissions</title>
-      <affected family="unix">
-        <platform>Red Hat Enterprise Linux 6</platform>
-      </affected>
-      <reference ref_id="TODO" source="CCE" />
-      <description>Checks for correct permissions on the /etc/at.allow file.</description>
-    </metadata>
-    <criteria>
-      <criterion test_ref="test_file_permissions_etc_at_allow" />
-    </criteria>
-  </definition>
-  <unix:file_test check="all" check_existence="at_least_one_exists" comment="/etc/at.allow file mode 0600" id="test_file_permissions_etc_at_allow" version="1">
-    <unix:object object_ref="object_file_permissions_etc_at_allow" />
-    <unix:state state_ref="state_mode_0600" />
-  </unix:file_test>
-  <unix:file_object comment="/etc/at.allow" id="object_file_permissions_etc_at_allow" version="1">
-    <unix:path>/etc</unix:path>
-    <unix:filename>at.allow</unix:filename>
-  </unix:file_object>
-  <unix:file_state id="state_mode_0600" version="1" operator="AND">
-    <unix:suid datatype="boolean">false</unix:suid>
-    <unix:sgid datatype="boolean">false</unix:sgid>
-    <unix:sticky datatype="boolean">false</unix:sticky>
-    <unix:uread datatype="boolean">true</unix:uread>
-    <unix:uwrite datatype="boolean">true</unix:uwrite>
-    <unix:uexec datatype="boolean">false</unix:uexec>
-    <unix:gread datatype="boolean">false</unix:gread>
-    <unix:gwrite datatype="boolean">false</unix:gwrite>
-    <unix:gexec datatype="boolean">false</unix:gexec>
-    <unix:oread datatype="boolean">false</unix:oread>
-    <unix:owrite datatype="boolean">false</unix:owrite>
-    <unix:oexec datatype="boolean">false</unix:oexec>
-  </unix:file_state>
-</def-group>
diff --git a/RHEL6/input/checks/package_pam_ccreds_removed.xml b/RHEL6/input/checks/package_pam_ccreds_removed.xml
deleted file mode 100644
index 3288cbf..0000000
--- a/RHEL6/input/checks/package_pam_ccreds_removed.xml
+++ /dev/null
@@ -1,27 +0,0 @@
-<def-group>
-  <definition class="compliance" id="package_pam_ccreds_removed"
-  version="1">
-    <metadata>
-      <title>Package pam_ccreds is removed</title>
-      <affected family="unix">
-        <platform>Red Hat Enterprise Linux 6</platform>
-      </affected>
-      <reference ref_id="17250-2 " source="CCE" />
-      <description>The package pam_ccreds should be removed. This
-      check was generated by the 'create_package_checks.py' script
-      in the templates directory.</description>
-    </metadata>
-    <criteria>
-      <criterion comment="package pam_ccreds is removed"
-      test_ref="test_package_pam_ccreds_removed" />
-    </criteria>
-  </definition>
-  <linux:rpminfo_test check="all" check_existence="none_exist"
-  id="test_package_pam_ccreds_removed" version="1"
-  comment="package pam_ccreds is removed">
-    <linux:object object_ref="obj_package_pam_ccreds" />
-  </linux:rpminfo_test>
-  <linux:rpminfo_object id="obj_package_pam_ccreds" version="1">
-    <linux:name>pam_ccreds</linux:name>
-  </linux:rpminfo_object>
-</def-group>
diff --git a/RHEL6/input/checks/service_ntpdate_enabled.xml b/RHEL6/input/checks/service_ntpdate_enabled.xml
deleted file mode 100644
index dfc0d4e..0000000
--- a/RHEL6/input/checks/service_ntpdate_enabled.xml
+++ /dev/null
@@ -1,103 +0,0 @@
-<def-group>
-  <definition class="compliance" id="service_ntpdate_enabled"
-  version="1">
-    <metadata>
-      <title>Service ntpdate Enabled</title>
-      <affected family="unix">
-        <platform>Red Hat Enterprise Linux 6</platform>
-      </affected>
-      <reference ref_id="TODO" source="CCE" />
-      <description>The ntpdate service should be enabled if
-      possible. This check was generated with the
-      create_services_enabled.py script in the templates
-      directory.</description>
-    </metadata>
-    <criteria comment="package ntp installed and service ntpdate is configured to start" operator="AND">
-    <extend_definition comment="ntp installed" definition_ref="package_ntp_installed" />
-    <criteria operator="OR" comment="service ntpdate is configured to start">
-      <criterion comment="ntpdate runlevel 0" test_ref="test_runlevel0_ntpdate" />
-      <criterion comment="ntpdate runlevel 1" test_ref="test_runlevel1_ntpdate" />
-      <criterion comment="ntpdate runlevel 2" test_ref="test_runlevel2_ntpdate" />
-      <criterion comment="ntpdate runlevel 3" test_ref="test_runlevel3_ntpdate" />
-      <criterion comment="ntpdate runlevel 4" test_ref="test_runlevel4_ntpdate" />
-      <criterion comment="ntpdate runlevel 5" test_ref="test_runlevel5_ntpdate" />
-      <criterion comment="ntpdate runlevel 6" test_ref="test_runlevel6_ntpdate" />
-    </criteria>
-    </criteria>
-  </definition>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel0_ntpdate"
-  version="2">
-    <unix:object object_ref="obj_runlevel0_ntpdate" />
-    <unix:state state_ref="state_service_on" />
-  </unix:runlevel_test>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel1_ntpdate"
-  version="2">
-    <unix:object object_ref="obj_runlevel1_ntpdate" />
-    <unix:state state_ref="state_service_on" />
-  </unix:runlevel_test>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel2_ntpdate"
-  version="2">
-    <unix:object object_ref="obj_runlevel2_ntpdate" />
-    <unix:state state_ref="state_service_on" />
-  </unix:runlevel_test>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel3_ntpdate"
-  version="2">
-    <unix:object object_ref="obj_runlevel3_ntpdate" />
-    <unix:state state_ref="state_service_on" />
-  </unix:runlevel_test>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel4_ntpdate"
-  version="2">
-    <unix:object object_ref="obj_runlevel4_ntpdate" />
-    <unix:state state_ref="state_service_on" />
-  </unix:runlevel_test>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel5_ntpdate"
-  version="2">
-    <unix:object object_ref="obj_runlevel5_ntpdate" />
-    <unix:state state_ref="state_service_on" />
-  </unix:runlevel_test>
-  <unix:runlevel_test check="all" check_existence="any_exist"
-  comment="Runlevel test" id="test_runlevel6_ntpdate"
-  version="2">
-    <unix:object object_ref="obj_runlevel6_ntpdate" />
-    <unix:state state_ref="state_service_on" />
-  </unix:runlevel_test>
-  <unix:runlevel_object id="obj_runlevel0_ntpdate" version="1">
-    <unix:service_name>ntpdate</unix:service_name>
-    <unix:runlevel operation="equals">0</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_object id="obj_runlevel1_ntpdate" version="1">
-    <unix:service_name>ntpdate</unix:service_name>
-    <unix:runlevel operation="equals">1</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_object id="obj_runlevel2_ntpdate" version="1">
-    <unix:service_name>ntpdate</unix:service_name>
-    <unix:runlevel operation="equals">2</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_object id="obj_runlevel3_ntpdate" version="1">
-    <unix:service_name>ntpdate</unix:service_name>
-    <unix:runlevel operation="equals">3</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_object id="obj_runlevel4_ntpdate" version="1">
-    <unix:service_name>ntpdate</unix:service_name>
-    <unix:runlevel operation="equals">4</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_object id="obj_runlevel5_ntpdate" version="1">
-    <unix:service_name>ntpdate</unix:service_name>
-    <unix:runlevel operation="equals">5</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_object id="obj_runlevel6_ntpdate" version="1">
-    <unix:service_name>ntpdate</unix:service_name>
-    <unix:runlevel operation="equals">6</unix:runlevel>
-  </unix:runlevel_object>
-  <unix:runlevel_state comment="daemon is configured to start"
-  id="state_service_on" version="1">
-    <unix:start datatype="boolean">true</unix:start>
-    <unix:kill datatype="boolean">false</unix:kill>
-  </unix:runlevel_state>
-</def-group>
-- 
1.7.1



More information about the scap-security-guide mailing list