[PATCH 0/1] Update CCE-14440-2 "Ensure Red Hat GPG Key is Installed"
Steve Grubb
sgrubb at redhat.com
Thu Sep 13 22:16:22 UTC 2012
On Thursday, September 13, 2012 04:07:06 PM Jeffrey Blank wrote:
> This seems right to me.
> I'd prefer having Steve or Peter comment on whether this is The Right
> Way To Check, but it's certainly an improvement (which makes it good
> enough to commit in my book, so you've got an ACK, and then we can
> change if so told.)
Checking for the rpm name is as good as it gets. :-)
-Steve
> On 09/12/2012 12:30 PM, Kenneth Stailey wrote:
> > CCE-14440-2 specifies to search the RPM summary tags of all packages
> > named gpg-pubkey for a text string indicating one of them is the
> > Red Hat release key but this is not possible to implement in OVAL 5.10.1.
> >
> > This implementation builds on the SCAP content provided with USGCB 1.0.5.0
> > by searching for the Red Hat release key by RPM name, version and release
> > tags. It also confirms that the Red Hat auxiliary key is installed to
> > support this new feature that RHEL 6 has.
> >
> > Kenneth Stailey (1):
> > Update CCE-14440-2 "Ensure Red Hat GPG Key is Installed"
> >
> > .../checks/package_red_hat_gpgkeys_installed.xml | 45
> > ++++++++++++++++++++++ .../input/checks/package_rhn_gpgkey_installed.xml
> > | 25 ------------ .../input/checks/templates/packages_installed.csv |
> > 1 -
> > RHEL6/input/system/software/updating.xml | 2 +-
> > 4 files changed, 46 insertions(+), 27 deletions(-)
> > create mode 100644
> > RHEL6/input/checks/package_red_hat_gpgkeys_installed.xml
> > delete mode 100644 RHEL6/input/checks/package_rhn_gpgkey_installed.xml
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
More information about the scap-security-guide
mailing list