[PATCH 6/6] Test Tags added for input/system/software/integrity.xml

Shawn Wells shawn at redhat.com
Sun Sep 30 17:48:02 UTC 2012


On 9/30/12 12:34 AM, Michael J. McConachie wrote:
>
> 0006-Test-Tags-added-for-input-system-software-integrity..patch
>
>
>  From 6a21c4829551eca4b5baad7f04e49fc7a5ffc72f Mon Sep 17 00:00:00 2001
> From: Michael McConachie<michael at redhat.com>
> Date: Sun, 30 Sep 2012 00:31:30 -0400
> Subject: [PATCH 6/6] Test Tags added for input/system/software/integrity.xml
>
> ---
>   RHEL6/input/system/software/integrity.xml | 1 +
>   1 file changed, 1 insertion(+)
>
> diff --git a/RHEL6/input/system/software/integrity.xml b/RHEL6/input/system/software/integrity.xml
> index 65ed613..93aa9dd 100644
> --- a/RHEL6/input/system/software/integrity.xml
> +++ b/RHEL6/input/system/software/integrity.xml
> @@ -38,6 +38,7 @@ The AIDE package must be installed if it is to be available for integrity checki
>   <ident cce="4209-3" />
>   <oval id="package_aide_installed" />
>   <ref nist="CM-6, CM-7, SC-28, SI-7" />
> +<tested by="MM" on="20120929"/>
>   </Rule>
>   
>   <Rule id="disable_prelink">
> -- 

nack

OCIL text written incorrectly, making it a finding if AIDE is installed. 
OCIL text should read "if the package is /not/ installed..."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20120930/6c44089d/attachment.html>


More information about the scap-security-guide mailing list