[PATCH 0/1] Update CCE-14440-2 "Ensure Red Hat GPG Key is Installed"

Steve Grubb sgrubb at redhat.com
Thu Sep 13 22:16:22 UTC 2012


On Thursday, September 13, 2012 04:07:06 PM Jeffrey Blank wrote:
> This seems right to me.
> I'd prefer having Steve or Peter comment on whether this is The Right
> Way To Check, but it's certainly an improvement (which makes it good
> enough to commit in my book, so you've got an ACK, and then we can
> change if so told.)

Checking for the rpm name is as good as it gets. :-)

-Steve


> On 09/12/2012 12:30 PM, Kenneth Stailey wrote:
> > CCE-14440-2 specifies to search the RPM summary tags of all packages
> > named gpg-pubkey for a text string indicating one of them is the
> > Red Hat release key but this is not possible to implement in OVAL 5.10.1.
> > 
> > This implementation builds on the SCAP content provided with USGCB 1.0.5.0
> > by searching for the Red Hat release key by RPM name, version and release
> > tags.  It also confirms that the Red Hat auxiliary key is installed to
> > support this new feature that RHEL 6 has.
> > 
> > Kenneth Stailey (1):
> >   Update CCE-14440-2 "Ensure Red Hat GPG Key is Installed"
> >  
> >  .../checks/package_red_hat_gpgkeys_installed.xml   | 45
> >  ++++++++++++++++++++++ .../input/checks/package_rhn_gpgkey_installed.xml
> >   | 25 ------------ .../input/checks/templates/packages_installed.csv  | 
> >  1 -
> >  RHEL6/input/system/software/updating.xml           |  2 +-
> >  4 files changed, 46 insertions(+), 27 deletions(-)
> >  create mode 100644
> >  RHEL6/input/checks/package_red_hat_gpgkeys_installed.xml
> >  delete mode 100644 RHEL6/input/checks/package_rhn_gpgkey_installed.xml
> 
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide


More information about the scap-security-guide mailing list