[PATCH 2/8] Updated sysctl-desc-macro to check for persistent config
Shawn Wells
shawn at redhat.com
Fri Sep 28 03:54:50 UTC 2012
Historically sysctl-desc-macro only checked for runtime config, added
content to check for persistent config via sysctl.conf file
---
RHEL6/transforms/shorthand2xccdf.xslt | 3 +++
1 files changed, 3 insertions(+), 0 deletions(-)
diff --git a/RHEL6/transforms/shorthand2xccdf.xslt b/RHEL6/transforms/shorthand2xccdf.xslt
index 1374311..11181c8 100644
--- a/RHEL6/transforms/shorthand2xccdf.xslt
+++ b/RHEL6/transforms/shorthand2xccdf.xslt
@@ -240,6 +240,9 @@ exclude-result-prefixes="xccdf xhtml">
To set the runtime status of the <xhtml:code><xsl:value-of select="@sysctl"/></xhtml:code> kernel parameter,
run the following command:
<xhtml:pre># sysctl -w <xsl:value-of select="@sysctl"/> <xsl:value-of select="@value"/></xhtml:pre>
+
+ To persist this configuration, the following line must be added to <tt>/etc/sysctl.conf</tt>:
+ <xhtml:pre><xsl:value-of select="@sysctl"/> <xsl:value-of select="@value"/></xhtml:pre>
</xsl:template>
<xsl:template match="sysctl-check-macro">
--
1.7.1
--BOKacYhQ+x31HxR3--
More information about the scap-security-guide
mailing list