[PATCH 1/4] added CCE IDs

Jeffrey Blank blank at eclipse.ncsc.mil
Tue Apr 30 20:31:36 UTC 2013


looks good.

these are fine as a Rules though two are howto-ish; i suppose any
automated check would simply see that the file used as a cert actually
exists.



On 04/30/2013 04:21 PM, David Smith wrote:
> 
> Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
> ---
>  RHEL6/input/services/imap.xml |    6 +++---
>  1 files changed, 3 insertions(+), 3 deletions(-)
> 
> diff --git a/RHEL6/input/services/imap.xml b/RHEL6/input/services/imap.xml
> index bbd7666..9731443 100644
> --- a/RHEL6/input/services/imap.xml
> +++ b/RHEL6/input/services/imap.xml
> @@ -106,7 +106,7 @@ protecting user credentials, mail as it is downloaded, and clients may use
>  SSL certificates to authenticate the server, preventing another system from 
>  impersonating the server.
>  </rationale>
> -<!-- <ident cce="27039-7" /> -->
> +<ident cce="27571-9" />
>  <oval id="dovecot_enable_ssl" />
>  </Rule>
>  
> @@ -127,7 +127,7 @@ Not using SSL to encrypt mail server traffic could allow unauthorized
>  access to credentials and mail messages since they are sent in plain 
>  text over the network.
>  </rationale>
> -<!-- <ident cce="CCD:TODO" /> -->
> +<ident cce="27459-7" />
>  <!-- <oval id="dovecot_configure_ssl_cert" /> -->
>  </Rule>
>  
> @@ -148,7 +148,7 @@ Not using SSL to encrypt mail server traffic could allow unauthorized
>  access to credentials and mail messages since they are sent in plain 
>  text over the network.
>  </rationale>
> -<!-- <ident cce="CCE:TODO" /> -->
> +<ident cce="27633-7" />
>  <!-- <oval id="dovecot_configure_ssl_key" /> -->
>  </Rule>
>  
> 


More information about the scap-security-guide mailing list