[scap-security-guide] #183: False positive: disable_sysctl_ipv4_default_send_redirect
scap-security-guide
trac at fedorahosted.org
Sat Apr 20 04:40:33 UTC 2013
#183: False positive: disable_sysctl_ipv4_default_send_redirect
------------------------------+-------------------------------------
Reporter: Logan.Rodrian@… | Owner: mnewman23
Type: defect | Status: closed
Priority: major | Milestone: RHEL6 STIG OVAL Content
Component: OVAL content | Version: 0.5.0-InitialDraft
Resolution: worksforme | Keywords:
Blocked By: | Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):
* resolution: => worksforme
* cc: scap-security-guide@… (added)
* status: new => closed
Comment:
[root at rhel6 checks]# sysctl -a | grep net.ipv4.conf.default.send_redirects
net.ipv4.conf.default.send_redirects = 1
[root at rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_conf_default_send_redirects.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_default_send_redirectsQ8TIEP.xml
Definition oval:scap-security-guide.testing:def:259: false
Evaluation done.
[root at rhel6 checks]# sysctl -w net.ipv4.conf.default.send_redirects=0
net.ipv4.conf.default.send_redirects = 0
[root at rhel6 checks]# ./testcheck.py
sysctl_net_ipv4_conf_default_send_redirects.xml
Evaluating with OVAL tempfile :
/tmp/sysctl_net_ipv4_conf_default_send_redirects7rJM3f.xml
Definition oval:scap-security-guide.testing:def:259: true
Evaluation done.
Resolving as worksforme
--
Ticket URL: <https://fedorahosted.org/scap-security-guide/ticket/183#comment:1>
scap-security-guide <http://fedorahosted.org/scap-security-guide>
scap-security-guide
More information about the scap-security-guide
mailing list