[PATCH 15/16] changed a coarse discussion about SNMP to a Group
David Smith
dsmith at eclipse.ncsc.mil
Fri Sep 21 22:11:16 UTC 2012
Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
RHEL6/input/services/snmp.xml | 11 ++++++-----
1 files changed, 6 insertions(+), 5 deletions(-)
diff --git a/RHEL6/input/services/snmp.xml b/RHEL6/input/services/snmp.xml
index 820270e..927119b 100644
--- a/RHEL6/input/services/snmp.xml
+++ b/RHEL6/input/services/snmp.xml
@@ -44,11 +44,12 @@ activation.
</Group> <!-- <Group id="disabling_snmp_service"> -->
-<Rule id="snmp_configure_server">
+<Group id="snmp_configure_server">
<title>Configure SNMP Server if Necessary</title>
-<description>If it is necessary to run the snmpd agent on the system, some best practices should be followed to minimize the
-security risk from the installation. The multiple security models implemented by SNMP cannot be fully covered
-here so only the following general configuration advice can be offered:
+<description>If it is necessary to run the snmpd agent on the system, some best
+practices should be followed to minimize the security risk from the
+installation. The multiple security models implemented by SNMP cannot be fully
+covered here so only the following general configuration advice can be offered:
<ul>
<li>use only SNMP version 3 security models and enable the use of authentication and encryption</li>
<li>write access to the MIB (Management Information Base) should be allowed only if necessary</li>
@@ -62,6 +63,6 @@ stations</li>
</description>
<!--<ident cce="14081-4" /> -->
<!--<oval id="snmp_configure_server" /> -->
-</Rule>
+</Group>
</Group> <!-- <Group id="snmp"> -->
--
1.7.1
More information about the scap-security-guide
mailing list