[scap-security-guide] #185: False positive: set_sysctl_net_ipv4_conf_all_accept_source_route

scap-security-guide trac at fedorahosted.org
Sat Apr 20 04:45:44 UTC 2013


#185: False positive:  set_sysctl_net_ipv4_conf_all_accept_source_route
------------------------------+-------------------------------------
  Reporter:  Logan.Rodrian@…  |      Owner:  mnewman23
      Type:  defect           |     Status:  closed
  Priority:  major            |  Milestone:  RHEL6 STIG OVAL Content
 Component:  OVAL content     |    Version:  0.5.0-InitialDraft
Resolution:  worksforme       |   Keywords:
Blocked By:                   |   Blocking:
------------------------------+-------------------------------------
Changes (by shawndwells):

 * status:  new => closed
 * cc: scap-security-guide@… (added)
 * resolution:   => worksforme


Comment:

 [root at rhel6 checks]# sysctl -a | grep
 net.ipv4.conf.all.accept_source_route
 net.ipv4.conf.all.accept_source_route = 0

 [root at rhel6 checks]# ./testcheck.py
 sysctl_net_ipv4_conf_all_accept_source_route.xml
 Evaluating with OVAL tempfile :
 /tmp/sysctl_net_ipv4_conf_all_accept_source_routesIkO41.xml
 Definition oval:scap-security-guide.testing:def:267: true
 Evaluation done.

 [root at rhel6 checks]# sysctl -w net.ipv4.conf.all.accept_source_route=1
 net.ipv4.conf.all.accept_source_route = 1

 [root at rhel6 checks]# ./testcheck.py
 sysctl_net_ipv4_conf_all_accept_source_route.xml
 Evaluating with OVAL tempfile :
 /tmp/sysctl_net_ipv4_conf_all_accept_source_routeufky2n.xml
 Definition oval:scap-security-guide.testing:def:267: false

 Resolving as worksforme

-- 
Ticket URL: <https://fedorahosted.org/scap-security-guide/ticket/185#comment:1>
scap-security-guide <http://fedorahosted.org/scap-security-guide>
scap-security-guide


More information about the scap-security-guide mailing list