[PATCH 3/3] minor edits to AIDE description

Shawn Wells shawn at redhat.com
Tue Apr 30 03:53:41 UTC 2013


On 4/29/13 11:49 PM, Jeffrey Blank wrote:
> Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
> ---
>   RHEL6/input/system/permissions/permissions.xml |    2 +-
>   RHEL6/input/system/software/integrity.xml      |   24 ++++++++++++------------
>   2 files changed, 13 insertions(+), 13 deletions(-)
>
> diff --git a/RHEL6/input/system/permissions/permissions.xml b/RHEL6/input/system/permissions/permissions.xml
> index 74af260..3dfb32e 100644
> --- a/RHEL6/input/system/permissions/permissions.xml
> +++ b/RHEL6/input/system/permissions/permissions.xml
> @@ -16,7 +16,7 @@ name of each local partition substituted for <i>PART</i> in turn.
>   <br /><br />
>   The following command prints a list of ext4 partitions on the local
>   machine, which is the default filesystem for Red Hat Enterprise Linux
> -6 installations.
> +6 installations:
>   <pre>$ mount -t ext4 | awk '{print $3}'</pre>
>   If your site uses a local filesystem type other than ext4 then you
>   will need to modify this command.</description>
> diff --git a/RHEL6/input/system/software/integrity.xml b/RHEL6/input/system/software/integrity.xml
> index 83a8287..6d91bfb 100644
> --- a/RHEL6/input/system/software/integrity.xml
> +++ b/RHEL6/input/system/software/integrity.xml
> @@ -20,13 +20,12 @@ in the presence of frequent software updates.
>   
>   <Group id="aide">
>   <title>Verify Integrity with AIDE</title>
> -<description>AIDE conducts integrity checks by comparing information
> -about files with previously-gathered information. Ideally, the AIDE
> -database should be created immediately after your system is built,
> -and before the system is connected to any network. AIDE is highly
> -configurable, with further configuration information located in
> -<tt>/usr/share/doc/aide-<i>VERSION</i></tt></description>
> -
> +<description>AIDE conducts integrity checks by comparing information about
> +files with previously-gathered information. Ideally, the AIDE database should
> +be created immediately after your system is built, and then again after any
> +software update.  AIDE is highly configurable, with further configuration
> +information located in <tt>/usr/share/doc/aide-<i>VERSION</i></tt>.
> +</description>
>   
>   <Rule id="package_aide_installed" severity="medium">
>   <title>Install AIDE</title>
> @@ -49,11 +48,11 @@ The AIDE package must be installed if it is to be available for integrity checki
>   <Rule id="disable_prelink">
>   <title>Disable Prelinking</title>
>   <description>
> -The prelinking feature
> -changes binaries in an attempt to decrease their startup time.
> -In order to disable it, change or add the following line inside the file <tt>/etc/sysconfig/prelink</tt>:
> +The prelinking feature changes binaries in an attempt to decrease their startup
> +time.  In order to disable it, change or add the following line inside the file
> +<tt>/etc/sysconfig/prelink</tt>:
>   <pre>PRELINKING=no</pre>
> -Next,  the following command to return binaries to a normal, non-prelinked state:
> +Next, run the following command to return binaries to a normal, non-prelinked state:
>   <pre># /usr/sbin/prelink -ua</pre>
>   </description>
>   <rationale>
> @@ -202,7 +201,8 @@ on the system.</rationale>
>   <description>
>   Additional security software that is not provided or supported
>   by Red Hat can be installed to provide complementary or duplicative
> -security capabilities to those provided by the base platform.
> +security capabilities to those provided by the base platform.  Add-on
> +software may not be appropriate for some specialized systems.
>   </description>
>   
>   <Rule id="install_hids" severity="high">


Ack


More information about the scap-security-guide mailing list