[PATCH 2/8] Updated sysctl-desc-macro to check for persistent config

Shawn Wells shawn at redhat.com
Fri Sep 28 03:54:50 UTC 2012


Historically sysctl-desc-macro only checked for runtime config, added
content to check for persistent config via sysctl.conf file
---
 RHEL6/transforms/shorthand2xccdf.xslt |    3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/RHEL6/transforms/shorthand2xccdf.xslt b/RHEL6/transforms/shorthand2xccdf.xslt
index 1374311..11181c8 100644
--- a/RHEL6/transforms/shorthand2xccdf.xslt
+++ b/RHEL6/transforms/shorthand2xccdf.xslt
@@ -240,6 +240,9 @@ exclude-result-prefixes="xccdf xhtml">
     To set the runtime status of the <xhtml:code><xsl:value-of select="@sysctl"/></xhtml:code> kernel parameter,
     run the following command:
     <xhtml:pre># sysctl -w <xsl:value-of select="@sysctl"/> <xsl:value-of select="@value"/></xhtml:pre>
+
+    To persist this configuration, the following line must be added to <tt>/etc/sysctl.conf</tt>:
+    <xhtml:pre><xsl:value-of select="@sysctl"/> <xsl:value-of select="@value"/></xhtml:pre>
   </xsl:template>
 
   <xsl:template match="sysctl-check-macro">
-- 
1.7.1


--BOKacYhQ+x31HxR3--


More information about the scap-security-guide mailing list