[PATCH 10/16] changed coarse-grained discussion to Groups for FTP

David Smith dsmith at eclipse.ncsc.mil
Fri Sep 21 22:11:11 UTC 2012


Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
 RHEL6/input/services/ftp.xml |    8 ++++----
 1 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/RHEL6/input/services/ftp.xml b/RHEL6/input/services/ftp.xml
index da1bc7a..da0a476 100644
--- a/RHEL6/input/services/ftp.xml
+++ b/RHEL6/input/services/ftp.xml
@@ -114,7 +114,7 @@ these logins as much as possible.</description>
 <!--<ref nist="CM-6, CM-7" /> -->
 </Rule>
 
-<Rule id="ftp_limit_users">
+<Group id="ftp_limit_users">
 <title>Limit Users Allowed FTP Access if Necessary</title>
 <description>If there is a mission-critical reason for users to access their accounts via the insecure FTP protocol, limit the set of users who are allowed this access. Edit the vsftpd configuration file. Add or correct the following configuration options:
 <pre>userlist_enable=YES
@@ -130,7 +130,7 @@ ftp</pre>
 <!--<ident cce="4443-8" />-->
 <!--<oval id="ftp_limit_users" />-->
 <!--<ref nist="CM-6, CM-7" /> -->
-</Rule>
+</Group>
 
 </Group> <!-- <Group id="ftp_restrict_users"> -->
 
@@ -161,7 +161,7 @@ these users from filling a disk used by other services.</rationale>
 <!--<ref nist="CM-6, CM-7" /> -->
 </Rule>
 
-<Rule id="ftp_configure_firewall">
+<Group id="ftp_configure_firewall">
 <title>Configure Firewalls to Protect the FTP Server</title>
 <description>Edit the file <tt>/etc/sysconfig/iptables</tt>. Add the following lines, ensuring that they appear before the final
 LOG and DROP lines for the RH-Firewall-1-INPUT chain:
@@ -178,7 +178,7 @@ FTP server to operate on a machine which is running a firewall.</rationale>
 <!--<ident cce="4443-8" />-->
 <!--<oval id="ftp_configure_firewall" />-->
 <!--<ref nist="CM-6, CM-7" /> -->
-</Rule>
+</Group>
 
 </Group> <!-- <Group id="ftp_configure_vsftpd"> -->
 </Group> <!-- <Group id="ftp"> -->
-- 
1.7.1



More information about the scap-security-guide mailing list