[PATCH] [bugfix] Ticket 388 - set_sysctl_net_ipv4_conf_default_accept_source_route pointed to wrong OVAL
Shawn Wells
shawn.d.wells at gmail.com
Sun Apr 21 18:24:43 UTC 2013
-------------- next part --------------
>From 0584760a9d31dcd0f800ce76d96d3d7bb2e9c0bb Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Sun, 21 Apr 2013 03:52:17 -0400
Subject: [PATCH] [bugfix] Ticket 388 - set_sysctl_net_ipv4_conf_default_accept_source_route pointed to wrong OVAL
XCCDF was pointing to the wrong OVAL check
---
RHEL6/input/system/network/kernel.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/RHEL6/input/system/network/kernel.xml b/RHEL6/input/system/network/kernel.xml
index 5f72ab3..b68630e 100644
--- a/RHEL6/input/system/network/kernel.xml
+++ b/RHEL6/input/system/network/kernel.xml
@@ -278,7 +278,7 @@ to be detected.</rationale>
<rationale>Accepting source-routed packets in the IPv4 protocol has few legitimate
uses. It should be disabled unless it is absolutely required.</rationale>
<ident cce="26983-7" />
-<oval id="sysctl_net_ipv4_conf_all_accept_source_route" value="sysctl_net_ipv4_conf_default_accept_source_route_value" />
+<oval id="sysctl_net_ipv4_conf_default_accept_source_route" value="sysctl_net_ipv4_conf_default_accept_source_route_value" />
<ref nist="AC-4,CM-7,SC-5,SC-7" disa="1551"/>
<tested by="DS" on="20121024"/>
</Rule>
--
1.7.1
More information about the scap-security-guide
mailing list