[PATCH] [bugfix] Ticket 388 - set_sysctl_net_ipv4_conf_default_accept_source_route pointed to wrong OVAL

Shawn Wells shawn.d.wells at gmail.com
Sun Apr 21 18:24:43 UTC 2013


-------------- next part --------------
>From 0584760a9d31dcd0f800ce76d96d3d7bb2e9c0bb Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Sun, 21 Apr 2013 03:52:17 -0400
Subject: [PATCH] [bugfix] Ticket 388 - set_sysctl_net_ipv4_conf_default_accept_source_route pointed to wrong OVAL
 XCCDF was pointing to the wrong OVAL check

---
 RHEL6/input/system/network/kernel.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/system/network/kernel.xml b/RHEL6/input/system/network/kernel.xml
index 5f72ab3..b68630e 100644
--- a/RHEL6/input/system/network/kernel.xml
+++ b/RHEL6/input/system/network/kernel.xml
@@ -278,7 +278,7 @@ to be detected.</rationale>
 <rationale>Accepting source-routed packets in the IPv4 protocol has few legitimate
 uses. It should be disabled unless it is absolutely required.</rationale>
 <ident cce="26983-7" />
-<oval id="sysctl_net_ipv4_conf_all_accept_source_route" value="sysctl_net_ipv4_conf_default_accept_source_route_value" />
+<oval id="sysctl_net_ipv4_conf_default_accept_source_route" value="sysctl_net_ipv4_conf_default_accept_source_route_value" />
 <ref nist="AC-4,CM-7,SC-5,SC-7" disa="1551"/>
 <tested by="DS" on="20121024"/>
 </Rule>
-- 
1.7.1



More information about the scap-security-guide mailing list