[PATCH] new sshd check macro
David Smith
dsmith at eclipse.ncsc.mil
Thu Sep 27 17:21:16 UTC 2012
Looks great; ACK
On 09/27/2012 09:49 AM, Jeffrey Blank wrote:
> For SSH (and other configurations), we want to preserve the ability to not flag non-compliance if the default (unspecified) is compliant. It reduces costs, which makes for a more compelling (less uncompelling?) argument for C&A activities.
>
> The wording of this is rough and definitely not final. After all the other checks and profile inclusion
> adjustments are complete, and when we get to copy editing, it will undoubtedly be improved.
> Jeffrey Blank (1):
> added new macro for SSH checks (rough wording for now), and used it
>
> RHEL6/input/services/ssh.xml | 15 +++++++++++++++
> RHEL6/transforms/shorthand2xccdf.xslt | 21 ++++++++++++++++++++-
> 2 files changed, 35 insertions(+), 1 deletions(-)
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
--
More information about the scap-security-guide
mailing list