[PATCH 15/16] changed a coarse discussion about SNMP to a Group

David Smith dsmith at eclipse.ncsc.mil
Fri Sep 21 22:11:16 UTC 2012


Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
 RHEL6/input/services/snmp.xml |   11 ++++++-----
 1 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/RHEL6/input/services/snmp.xml b/RHEL6/input/services/snmp.xml
index 820270e..927119b 100644
--- a/RHEL6/input/services/snmp.xml
+++ b/RHEL6/input/services/snmp.xml
@@ -44,11 +44,12 @@ activation.
 
 </Group> <!-- <Group id="disabling_snmp_service"> -->
 
-<Rule id="snmp_configure_server">
+<Group id="snmp_configure_server">
 <title>Configure SNMP Server if Necessary</title>
-<description>If it is necessary to run the snmpd agent on the system, some best practices should be followed to minimize the
-security risk from the installation. The multiple security models implemented by SNMP cannot be fully covered
-here so only the following general configuration advice can be offered:
+<description>If it is necessary to run the snmpd agent on the system, some best
+practices should be followed to minimize the security risk from the
+installation. The multiple security models implemented by SNMP cannot be fully
+covered here so only the following general configuration advice can be offered:
 <ul>
 <li>use only SNMP version 3 security models and enable the use of authentication and encryption</li>
 <li>write access to the MIB (Management Information Base) should be allowed only if necessary</li>
@@ -62,6 +63,6 @@ stations</li>
 </description>
 <!--<ident cce="14081-4" /> -->
 <!--<oval id="snmp_configure_server" /> -->
-</Rule>
+</Group>
 
 </Group> <!-- <Group id="snmp"> -->
-- 
1.7.1



More information about the scap-security-guide mailing list