[PATCH 3/8] Added persistent config test to sysctl-check-macro Historically this macro only checked for runtime config, not persistent configuration via /etc/sysctl.conf
Shawn Wells
shawn at redhat.com
Fri Sep 28 04:03:21 UTC 2012
---
RHEL6/transforms/shorthand2xccdf.xslt | 9 +++++----
1 files changed, 5 insertions(+), 4 deletions(-)
diff --git a/RHEL6/transforms/shorthand2xccdf.xslt b/RHEL6/transforms/shorthand2xccdf.xslt
index 11181c8..77b4587 100644
--- a/RHEL6/transforms/shorthand2xccdf.xslt
+++ b/RHEL6/transforms/shorthand2xccdf.xslt
@@ -246,12 +246,13 @@ exclude-result-prefixes="xccdf xhtml">
</xsl:template>
<xsl:template match="sysctl-check-macro">
- The status of the <xhtml:code><xsl:value-of select="@sysctl"/></xhtml:code> kernel parameter can be queried
+ The runtime status of the <xhtml:code><xsl:value-of select="@sysctl"/></xhtml:code> kernel parameter can be queried
by running the following command:
<xhtml:pre>$ sysctl <xsl:value-of select="@sysctl"/></xhtml:pre>
- The output of the command should indicate a value of <xhtml:code><xsl:value-of select="@value"/></xhtml:code>.
- If this value is not the default value, investigate how it could have been adjusted at runtime, and verify
- that it is not set improperly in <xhtml:code>/etc/sysctl.conf</xhtml:code>.
+ The output of the command should indicate a value of <xhtml:code><xsl:value-of select="@value"/></xhtml:code>.<br />
+ To verify persistent configuration of the <xhtml:code><xsl:value-of select="@sysctl"/></xhtml:code> kernel parameter,
+ verify that the following line is present in <tt>/etc/sysctl.conf</tt>:
+ <xhtml:pre>$ sysctl <xsl:value-of select="@sysctl"/></xhtml:pre>
</xsl:template>
<xsl:template match="fileperms-desc-macro">
--
1.7.1
--IJpNTDwzlM2Ie8A6--
More information about the scap-security-guide
mailing list