[PATCH 0/3] manual checks (and OCIL?) now/soon, new macros
Jeffrey Blank
blank at eclipse.ncsc.mil
Thu Sep 6 21:14:06 UTC 2012
This commitset provides a way for us to include manual checking ("auditing" as some call it)
for settings compliance with each Rule.
The patch should make it clear what the general idea is. As with the rest of
the project, the input format (in this case, new <ocil> tags) is designed to
allow for authoring ease and require the author only to provide the necessary
information. Transforms should take care of putting this information into
whatever format the specification (or a customer) requires.
Note that we do not yet have proper OCIL output here, just a start at formatting/providing it
inline with the XCCDF document.
Jeffrey Blank (3):
added proposed new "<ocil>" tags to contain manual check information.
* these also use new macros for disabling services and
checking partitioning
use of new macros for disk partition checking, minor language updates
support for handling new <ocil> tags for manual check info *
also, support for displaying this manual check information in
tables * definitions of new macros to make developing easier
RHEL6/input/services/avahi.xml | 1 +
RHEL6/input/services/base.xml | 25 +++++++++++++
RHEL6/input/services/cron.xml | 2 +
RHEL6/input/services/dns.xml | 1 +
RHEL6/input/services/http.xml | 1 +
RHEL6/input/services/obsolete.xml | 7 ++++
RHEL6/input/services/printing.xml | 1 +
RHEL6/input/services/smb.xml | 1 +
RHEL6/input/system/software/disk_partitioning.xml | 41 ++++++++++++---------
RHEL6/transforms/constants.xslt | 1 +
RHEL6/transforms/relabelids.py | 6 ++-
RHEL6/transforms/shorthand2xccdf.xslt | 38 +++++++++++++++++++-
RHEL6/transforms/xccdf2table-profileccirefs.xslt | 7 ++++
13 files changed, 111 insertions(+), 21 deletions(-)
More information about the scap-security-guide
mailing list