[PATCH 1/4] added CCE IDs
Jeffrey Blank
blank at eclipse.ncsc.mil
Tue Apr 30 20:31:36 UTC 2013
looks good.
these are fine as a Rules though two are howto-ish; i suppose any
automated check would simply see that the file used as a cert actually
exists.
On 04/30/2013 04:21 PM, David Smith wrote:
>
> Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
> ---
> RHEL6/input/services/imap.xml | 6 +++---
> 1 files changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/RHEL6/input/services/imap.xml b/RHEL6/input/services/imap.xml
> index bbd7666..9731443 100644
> --- a/RHEL6/input/services/imap.xml
> +++ b/RHEL6/input/services/imap.xml
> @@ -106,7 +106,7 @@ protecting user credentials, mail as it is downloaded, and clients may use
> SSL certificates to authenticate the server, preventing another system from
> impersonating the server.
> </rationale>
> -<!-- <ident cce="27039-7" /> -->
> +<ident cce="27571-9" />
> <oval id="dovecot_enable_ssl" />
> </Rule>
>
> @@ -127,7 +127,7 @@ Not using SSL to encrypt mail server traffic could allow unauthorized
> access to credentials and mail messages since they are sent in plain
> text over the network.
> </rationale>
> -<!-- <ident cce="CCD:TODO" /> -->
> +<ident cce="27459-7" />
> <!-- <oval id="dovecot_configure_ssl_cert" /> -->
> </Rule>
>
> @@ -148,7 +148,7 @@ Not using SSL to encrypt mail server traffic could allow unauthorized
> access to credentials and mail messages since they are sent in plain
> text over the network.
> </rationale>
> -<!-- <ident cce="CCE:TODO" /> -->
> +<ident cce="27633-7" />
> <!-- <oval id="dovecot_configure_ssl_key" /> -->
> </Rule>
>
>
More information about the scap-security-guide
mailing list