[PATCH 0/1] Update CCE-14440-2 "Ensure Red Hat GPG Key is Installed"

Jeffrey Blank blank at eclipse.ncsc.mil
Thu Sep 13 20:07:06 UTC 2012


This seems right to me.
I'd prefer having Steve or Peter comment on whether this is The Right
Way To Check, but it's certainly an improvement (which makes it good
enough to commit in my book, so you've got an ACK, and then we can
change if so told.)


On 09/12/2012 12:30 PM, Kenneth Stailey wrote:
> CCE-14440-2 specifies to search the RPM summary tags of all packages
> named gpg-pubkey for a text string indicating one of them is the
> Red Hat release key but this is not possible to implement in OVAL 5.10.1.
> 
> This implementation builds on the SCAP content provided with USGCB 1.0.5.0
> by searching for the Red Hat release key by RPM name, version and release
> tags.  It also confirms that the Red Hat auxiliary key is installed to
> support this new feature that RHEL 6 has.
> 
> Kenneth Stailey (1):
>   Update CCE-14440-2 "Ensure Red Hat GPG Key is Installed"
> 
>  .../checks/package_red_hat_gpgkeys_installed.xml   | 45 ++++++++++++++++++++++
>  .../input/checks/package_rhn_gpgkey_installed.xml  | 25 ------------
>  .../input/checks/templates/packages_installed.csv  |  1 -
>  RHEL6/input/system/software/updating.xml           |  2 +-
>  4 files changed, 46 insertions(+), 27 deletions(-)
>  create mode 100644 RHEL6/input/checks/package_red_hat_gpgkeys_installed.xml
>  delete mode 100644 RHEL6/input/checks/package_rhn_gpgkey_installed.xml
> 


More information about the scap-security-guide mailing list