[PATCH 1/5] removal of duplicate OCIL checking text

Jeffrey Blank blank at eclipse.ncsc.mil
Mon Sep 24 21:55:32 UTC 2012


Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
 RHEL6/input/services/base.xml           |    1 -
 RHEL6/input/services/dhcp.xml           |    2 +-
 RHEL6/input/system/network/ipsec.xml    |    1 -
 RHEL6/input/system/network/wireless.xml |    1 -
 4 files changed, 1 insertions(+), 4 deletions(-)

diff --git a/RHEL6/input/services/base.xml b/RHEL6/input/services/base.xml
index 1e29627..eba13df 100644
--- a/RHEL6/input/services/base.xml
+++ b/RHEL6/input/services/base.xml
@@ -400,7 +400,6 @@ RHN server or satellite and managed as such.
 <rationale>Although systems management and patching is extremely important to
 system security, management by a system outside the enterprise enclave is not
 desirable for some environments.</rationale>
-<ocil><service-disable-ocil-macro service="rhnsd" /></ocil>
 <ident cce="3416-5" />
 <oval id="service_rhnsd_disabled" />
 <ref nist="CM-6, CM-7" disa="382" />
diff --git a/RHEL6/input/services/dhcp.xml b/RHEL6/input/services/dhcp.xml
index 51dbba5..2c33e4f 100644
--- a/RHEL6/input/services/dhcp.xml
+++ b/RHEL6/input/services/dhcp.xml
@@ -56,7 +56,7 @@ DHCP server if there is one.
 the dhcp package can be uninstalled.
 <package-remove-macro package="dhcp" />
 </description>
-<ocil><package-remove-check-macro package="dhcp" /></ocil>
+<ocil><package-check-macro package="dhcp" /></ocil>
 <rationale>
 Removing the DHCP server ensures that it cannot be easily or
 accidentally reactivated and disrupt network operation.
diff --git a/RHEL6/input/system/network/ipsec.xml b/RHEL6/input/system/network/ipsec.xml
index 98e3c5d..6087fa9 100644
--- a/RHEL6/input/system/network/ipsec.xml
+++ b/RHEL6/input/system/network/ipsec.xml
@@ -17,7 +17,6 @@ untrusted networks. <package-install-macro package="openswan"/>
 to initiate a secure VPN connection protects information when it is
 transmitted over a wide area network.
 </rationale>
-<ocil><package-check-macro package="openswan"/></ocil>
 <!--<ident cce="TODO" />-->
 <oval id="package_openswan_installed" />
 <ref nist="AC-17, MA-4, SC-9" disa="1130,1131,1135" />
diff --git a/RHEL6/input/system/network/wireless.xml b/RHEL6/input/system/network/wireless.xml
index 8355b95..7686390 100644
--- a/RHEL6/input/system/network/wireless.xml
+++ b/RHEL6/input/system/network/wireless.xml
@@ -97,7 +97,6 @@ the need to install such a driver first.
 connections to to Bluetooth devices, which entails some security risk.
 Nevertheless, variation in this risk decision may be expected due to the
 utility of Bluetooth connectivity and its limited range.</rationale>
-<ocil><service-disable-check-macro service="bluetooth" /></ocil>
 <ident cce="4355-4" />
 <oval id="service_bluetooth_disabled" />
 <ref nist="AC-18, CM-6, CM-7" disa="85" />
-- 
1.7.1



More information about the scap-security-guide mailing list