[PATCH 0/1] Update CCE-14440-2 "Ensure Red Hat GPG Key is Installed"

Kenneth Stailey kstailey.lists at gmail.com
Wed Sep 12 16:30:27 UTC 2012


CCE-14440-2 specifies to search the RPM summary tags of all packages
named gpg-pubkey for a text string indicating one of them is the
Red Hat release key but this is not possible to implement in OVAL 5.10.1.

This implementation builds on the SCAP content provided with USGCB 1.0.5.0
by searching for the Red Hat release key by RPM name, version and release
tags.  It also confirms that the Red Hat auxiliary key is installed to
support this new feature that RHEL 6 has.

Kenneth Stailey (1):
  Update CCE-14440-2 "Ensure Red Hat GPG Key is Installed"

 .../checks/package_red_hat_gpgkeys_installed.xml   | 45 ++++++++++++++++++++++
 .../input/checks/package_rhn_gpgkey_installed.xml  | 25 ------------
 .../input/checks/templates/packages_installed.csv  |  1 -
 RHEL6/input/system/software/updating.xml           |  2 +-
 4 files changed, 46 insertions(+), 27 deletions(-)
 create mode 100644 RHEL6/input/checks/package_red_hat_gpgkeys_installed.xml
 delete mode 100644 RHEL6/input/checks/package_rhn_gpgkey_installed.xml

-- 
1.7.12



More information about the scap-security-guide mailing list