[PATCH 3/3] minor edits to AIDE description
Shawn Wells
shawn at redhat.com
Tue Apr 30 03:53:41 UTC 2013
On 4/29/13 11:49 PM, Jeffrey Blank wrote:
> Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
> ---
> RHEL6/input/system/permissions/permissions.xml | 2 +-
> RHEL6/input/system/software/integrity.xml | 24 ++++++++++++------------
> 2 files changed, 13 insertions(+), 13 deletions(-)
>
> diff --git a/RHEL6/input/system/permissions/permissions.xml b/RHEL6/input/system/permissions/permissions.xml
> index 74af260..3dfb32e 100644
> --- a/RHEL6/input/system/permissions/permissions.xml
> +++ b/RHEL6/input/system/permissions/permissions.xml
> @@ -16,7 +16,7 @@ name of each local partition substituted for <i>PART</i> in turn.
> <br /><br />
> The following command prints a list of ext4 partitions on the local
> machine, which is the default filesystem for Red Hat Enterprise Linux
> -6 installations.
> +6 installations:
> <pre>$ mount -t ext4 | awk '{print $3}'</pre>
> If your site uses a local filesystem type other than ext4 then you
> will need to modify this command.</description>
> diff --git a/RHEL6/input/system/software/integrity.xml b/RHEL6/input/system/software/integrity.xml
> index 83a8287..6d91bfb 100644
> --- a/RHEL6/input/system/software/integrity.xml
> +++ b/RHEL6/input/system/software/integrity.xml
> @@ -20,13 +20,12 @@ in the presence of frequent software updates.
>
> <Group id="aide">
> <title>Verify Integrity with AIDE</title>
> -<description>AIDE conducts integrity checks by comparing information
> -about files with previously-gathered information. Ideally, the AIDE
> -database should be created immediately after your system is built,
> -and before the system is connected to any network. AIDE is highly
> -configurable, with further configuration information located in
> -<tt>/usr/share/doc/aide-<i>VERSION</i></tt></description>
> -
> +<description>AIDE conducts integrity checks by comparing information about
> +files with previously-gathered information. Ideally, the AIDE database should
> +be created immediately after your system is built, and then again after any
> +software update. AIDE is highly configurable, with further configuration
> +information located in <tt>/usr/share/doc/aide-<i>VERSION</i></tt>.
> +</description>
>
> <Rule id="package_aide_installed" severity="medium">
> <title>Install AIDE</title>
> @@ -49,11 +48,11 @@ The AIDE package must be installed if it is to be available for integrity checki
> <Rule id="disable_prelink">
> <title>Disable Prelinking</title>
> <description>
> -The prelinking feature
> -changes binaries in an attempt to decrease their startup time.
> -In order to disable it, change or add the following line inside the file <tt>/etc/sysconfig/prelink</tt>:
> +The prelinking feature changes binaries in an attempt to decrease their startup
> +time. In order to disable it, change or add the following line inside the file
> +<tt>/etc/sysconfig/prelink</tt>:
> <pre>PRELINKING=no</pre>
> -Next, the following command to return binaries to a normal, non-prelinked state:
> +Next, run the following command to return binaries to a normal, non-prelinked state:
> <pre># /usr/sbin/prelink -ua</pre>
> </description>
> <rationale>
> @@ -202,7 +201,8 @@ on the system.</rationale>
> <description>
> Additional security software that is not provided or supported
> by Red Hat can be installed to provide complementary or duplicative
> -security capabilities to those provided by the base platform.
> +security capabilities to those provided by the base platform. Add-on
> +software may not be appropriate for some specialized systems.
> </description>
>
> <Rule id="install_hids" severity="high">
Ack
More information about the scap-security-guide
mailing list