April 2013 Archives by author
Starting: Mon Apr 1 14:47:55 UTC 2013
Ending: Tue Apr 30 20:33:56 UTC 2013
Messages: 342
- [PATCH 11/21] Updated OVAL reference in ensure_gpgcheck_globally_activated
Jeffrey Blank
- [PATCH 13/21] Updated OVAL name of enable_selinux_bootloader
Jeffrey Blank
- [PATCH 15/21] Renamed OVAL in set_selinux_state
Jeffrey Blank
- [PATCH 16/21] Renamed OVAL in set_selinux_policy to match XCCDF rule name
Jeffrey Blank
- [PATCH 17/21] Renamed OVAL in selinux_unlabeled_device_files to match XCCDF rule name
Jeffrey Blank
- [PATCH 18/21] Renamed OVAL in restrict_root_console_logins to match XCCDF rule name
Jeffrey Blank
- [PATCH 21/21] Renamed OVAL no_empty_passwords.xml to match XCCDF rule name
Jeffrey Blank
- [PATCH] [bugfix] Makefile remnants of table-profilenistrefs
Jeffrey Blank
- [PATCH 21/21] Renamed OVAL no_empty_passwords.xml to match XCCDF rule name
Jeffrey Blank
- [PATCH 21/21] Renamed OVAL no_empty_passwords.xml to match XCCDF rule name
Jeffrey Blank
- [PATCH] new overlay file
Jeffrey Blank
- [PATCH] new stig_overlay file, to supercede alt-titles
Jeffrey Blank
- [PATCH 0/2] transform to create STIG tables based on overlay
Jeffrey Blank
- [PATCH 1/2] new transform to apply STIG overlay with IDs and alternate titles
Jeffrey Blank
- [PATCH 2/2] rules to run the new STIG overlay and send its output through the existing table generation transform for STIGs * also, deactivation of old rules which should no longer be needed (will remain as comments for now)
Jeffrey Blank
- [PATCH 0/2] adding columns to output table
Jeffrey Blank
- [PATCH 1/2] removed some unusued Make actions
Jeffrey Blank
- [PATCH 2/2] deleted unused transform
Jeffrey Blank
- [PATCH 0/5] cleanup of table transforms
Jeffrey Blank
- [PATCH 1/5] removing unneeded outputs, commented lines * also some renaming of some outputs
Jeffrey Blank
- [PATCH 2/5] new file for common style element for all table transforms
Jeffrey Blank
- [PATCH 3/5] simplification of profile-based table transforms * this is possible due to oscap xccdf resolve working * now we don't need recursion
Jeffrey Blank
- [PATCH 4/5] cleanup and simplication of table transform with references
Jeffrey Blank
- [PATCH 5/5] table transforms now use shared style element
Jeffrey Blank
- [PATCH 0/5] cleanup of table transforms
Jeffrey Blank
- [PATCH] improvements to aesthetics for table display
Jeffrey Blank
- [PATCH] added NIST 800-53 rev3 in XML format to references folder
Jeffrey Blank
- [PATCH] added NIST 800-53 rev3 in XML format to references folder
Jeffrey Blank
- [PATCH] added and modified CCEs
Jeffrey Blank
- [PATCH 1/5] Updated XCCDF and OVAL of groupowner_rsyslog_files
Jeffrey Blank
- [PATCH 3/5] Created bash remediation
Jeffrey Blank
- [PATCH 2/5] Fixed rsyslog_files_ownership OVAL
Jeffrey Blank
- [PATCH 4/5] Created remediation
Jeffrey Blank
- [PATCH 5/5] Enabled OVAL for service_ntpdate_disabled
Jeffrey Blank
- [PATCH 0/2] CCE sanity checking
Jeffrey Blank
- [PATCH 1/5] Updated XCCDF and OVAL of groupowner_rsyslog_files
Jeffrey Blank
- [PATCH] removal of Rule which does not apply to rsyslog
Jeffrey Blank
- [PATCH] removal of Rule which does not apply to rsyslog
Jeffrey Blank
- help with OVAL transforms
Jeffrey Blank
- help with OVAL transforms
Jeffrey Blank
- [PATCH 1/2] (resubmit) Ticket 396 - OVAL needed for file_ownership_library_dirs
Jeffrey Blank
- Fwd: Re: [PATCH 1/2] (resubmit) Ticket 396 - OVAL needed for file_ownership_library_dirs
Jeffrey Blank
- [PATCH 0/2] updated library ownership check
Jeffrey Blank
- [PATCH 1/2] adding reference to OVAL check for library ownership
Jeffrey Blank
- [PATCH 2/2] bugfixed version of library permission OVAL check
Jeffrey Blank
- [PATCH 0/3] OVAL update of set_password_hashing_algorithm
Jeffrey Blank
- [PATCH 0/2] Two fixes for OVAL checks accounts_dangerous_path_for_root and package_red_hat_gpgkeys_installed
Jeffrey Blank
- [PATCH 0/2] Two fixes for OVAL checks accounts_dangerous_path_for_root and package_red_hat_gpgkeys_installed
Jeffrey Blank
- [PATCH 0/2] updated library file permissions check
Jeffrey Blank
- [PATCH 1/2] OVAL check to find library files with permissions go+w
Jeffrey Blank
- [PATCH 2/2] added link to new OVAL check for library perms
Jeffrey Blank
- [PATCH 1/2] Existing check returns false instead of true when the PATH passes all checks, and it doesn't check that path elements begin with /
Jeffrey Blank
- [PATCH 2/2] Maura: Duplicate state ids fixed, fixed reversed version and release info for the auxillary key
Jeffrey Blank
- validating project content more thoroughly, automatically
Jeffrey Blank
- [PATCH] added some new Makerules to validate content
Jeffrey Blank
- [PATCH] added some new Makerules to validate content
Jeffrey Blank
- [PATCH] improvement to verify-references.py
Jeffrey Blank
- [PATCH] improved verify-references.py to not flag OVAL definitions which are extended by others as unused
Jeffrey Blank
- [PATCH] improved verify-references.py to not flag OVAL definitions which are extended by others as unused
Jeffrey Blank
- [PATCH] [bugfix] Ticket Rule "disable_at" duplicate "service_atd_disabled"
Jeffrey Blank
- [PATCH] [bugfix] OVAL partition IDs != filenames
Jeffrey Blank
- [PATCH] [bugfix] Ticket 388 - set_sysctl_net_ipv4_conf_default_accept_source_route pointed to wrong OVAL
Jeffrey Blank
- [PATCH] [bugfix] Ticket 114 - pattern match of RHEL6/input/checks/file_owner_ldap_server_files.xml
Jeffrey Blank
- [PATCH] [bugfix] Ticket 169 - False positive - postfix_logging
Jeffrey Blank
- [PATCH] [bugfix] Ticket 381 - Rule "disable_telnet_service" always true
Jeffrey Blank
- [PATCH] [bugfix] Ticket 382 - Rule "Disable tftp Service" always true
Jeffrey Blank
- [PATCH 0/2] minor description fixups in Groups
Jeffrey Blank
- [PATCH 1/2] updating text to describe AIDE
Jeffrey Blank
- [PATCH 2/2] removed references to pirut and pup which are not in RHEL 6
Jeffrey Blank
- [PATCH 0/3] more edits in preparation for prose guide issuance
Jeffrey Blank
- [PATCH 1/3] minor changes to introduction text
Jeffrey Blank
- [PATCH 2/3] deletion of introductory text with obsolete tone
Jeffrey Blank
- [PATCH 3/3] minor edits to AIDE description
Jeffrey Blank
- [PATCH] minor editing in preparation for prose guide
Jeffrey Blank
- [PATCH 1/4] added CCE IDs
Jeffrey Blank
- [PATCH 2/4] removed duplicate Rules
Jeffrey Blank
- [PATCH 3/4] minor touchups
Jeffrey Blank
- [PATCH 4/4] added CCE IDs
Jeffrey Blank
- Workbook uploaded to wiki -- anyone know Docbook or LaTeX?
Maura Dailey
- [PATCH 0/2] Two fixes for OVAL checks accounts_dangerous_path_for_root and package_red_hat_gpgkeys_installed
Maura Dailey
- [PATCH 1/2] Maura: Existing check returns false instead of true when the PATH passes all checks, and it doesn't check that path elements begin with /
Maura Dailey
- [PATCH 2/2] Maura: Duplicate state ids fixed, fixed reversed version and release info for the auxillary key
Maura Dailey
- [PATCH 0/2] Two fixes for OVAL checks accounts_dangerous_path_for_root and package_red_hat_gpgkeys_installed
Maura Dailey
- [PATCH 1/2] adding reference to OVAL check for library ownership
Maura Dailey
- [PATCH 2/2] bugfixed version of library permission OVAL check
Maura Dailey
- [PATCH 0/2] Two fixes for OVAL checks accounts_dangerous_path_for_root and package_red_hat_gpgkeys_installed
Maura Dailey
- [PATCH 0/2] Replacement patches for last set for accounts_dangerous_path_for_root.xml and package_red_hat_gpgkey_installed.xml
Maura Dailey
- [PATCH 1/2] Existing check returns false instead of true when the PATH passes all checks, and it doesn't check that path elements begin with /
Maura Dailey
- [PATCH 2/2] Duplicate state ids fixed, fixed reversed version and release info for the auxillary key
Maura Dailey
- [PATCH 0/2] updated library file permissions check
Maura Dailey
- [PATCH] added some new Makerules to validate content
Maura Dailey
- domain name ideas?
Gary Gapinski
- domain name ideas?
Gary Gapinski
- [PATCH 1/5] Updated XCCDF and OVAL of groupowner_rsyslog_files
Tomas Heinrich
- [PATCH 1/5] Updated XCCDF and OVAL of groupowner_rsyslog_files
Tomas Heinrich
- [PATCH 1/5] Updated XCCDF and OVAL of groupowner_rsyslog_files
Tomas Heinrich
- [remediation-dev] [Open-scap] Remediation Scripts
Kinney, Michael A
- [Open-scap] Remediation Scripts
Simon Lukasik
- Remediation Scripts
Simon Lukasik
- [PATCH] Update to put fix content common functions into plain-text elements
Simon Lukasik
- SCAP 1.2 DataStream File Format
Simon Lukasik
- SCAP 1.2 DataStream File Format
Simon Lukasik
- git service down?
Brian Millett
- git service down?
Brian Millett
- git service down?
Brian Millett
- RHEL6
Moessbauer, David
- RHEL6
Moessbauer, David
- RHEL6
Moessbauer, David
- Remediation Scripts
Nunez, Luis K
- EXT :Re: [scap-security-guide] #174: False positive: enable_auditd_bootloader
Rodrian, Logan P (IS)
- Remediation Scripts
Kurt Seifried
- Polyinstantiation of /tmp and /var/tmp and CGroups....
Kurt Seifried
- [PATCH] Added refine-value of 1 for var_password_min_age to profile stig-rhel6-server (UNCLASSIFIED)
Shaw, Ray V CTR (US)
- Remediation Scripts
Francisco Slavin
- [PATCH 1/2] Bash Fix: Adding a common function for removing NIS inclusion lines
Francisco Slavin
- [PATCH 2/2] Bash Fixes: Adding fixes to remove NIS inclusions from /etc/passwd /etc/shadow and /etc/groups
Francisco Slavin
- Remediation Scripts
Francisco Slavin
- [PATCH] Update to put fix content common functions into plain-text elements
Francisco Slavin
- [PATCH] Infrastructure: Update fix transform handling to put common functions into <plain-text> elements for easy code reuse.
Francisco Slavin
- Remediation Scripts
Francisco Slavin
- [PATCH] Update to put fix content common functions into plain-text elements
Francisco Slavin
- RHEL6
Dave Smith
- [PATCH 00/64] patchbomb: NIST mappings and FISMA profile expansion
Dave Smith
- [PATCH] modified file ownership macros
David Smith
- [PATCH] modified file ownership check macros to reflect "ls -lL"
David Smith
- [PATCH] new overlay file
David Smith
- [PATCH 0/2] transform to create STIG tables based on overlay
David Smith
- [PATCH 0/5] cleanup of table transforms
David Smith
- [PATCH] added and modified CCEs
David Smith
- [PATCH] CCE fixes
David Smith
- [PATCH 0/2] CCE sanity checking
David Smith
- [PATCH 1/2] added script to verify validity of CCE assignments
David Smith
- [PATCH 2/2] added blank line at the top to avoid a false positive with verify-cce.py
David Smith
- git service down?
David Smith
- [PATCH 01/11] Updated NIST Auxiliary mappings for AC-2
David Smith
- [PATCH] minor editing in preparation for prose guide
David Smith
- [PATCH 0/4] new CCEs, removal of duplicate Rules, and minor edits
David Smith
- [PATCH 1/4] added CCE IDs
David Smith
- [PATCH 2/4] removed duplicate Rules
David Smith
- [PATCH 3/4] minor touchups
David Smith
- [PATCH 4/4] added CCE IDs
David Smith
- Remediation Scripts
Truhn, Chad M CTR NSWCDD, CXA30
- Remediation Scripts
Truhn, Chad M CTR NSWCDD, CXA30
- Polyinstantiation of /tmp and /var/tmp and CGroups....
Trevor Vaughan
- domain name ideas?
Trevor Vaughan
- Fwd: [Open-scap] Video preview of the OSCAP Anaconda addon
Peter Vrabec
- [PATCH] modified file ownership check macros to reflect "ls -lL"
Shawn Wells
- Workbook uploaded to wiki -- anyone know Docbook or LaTeX?
Shawn Wells
- Workbook uploaded to wiki -- anyone know Docbook or LaTeX?
Shawn Wells
- [PATCH] [bugfix] Makefile remnants of table-profilenistrefs
Shawn Wells
- [PATCH 21/21] Renamed OVAL no_empty_passwords.xml to match XCCDF rule name
Shawn Wells
- [PATCH 21/21] Renamed OVAL no_empty_passwords.xml to match XCCDF rule name
Shawn Wells
- [PATCH 21/21] Renamed OVAL no_empty_passwords.xml to match XCCDF rule name
Shawn Wells
- [PATCH 01/21] Updated create_package_installed template process
Shawn Wells
- [PATCH 02/21] Updated package_aide_installed
Shawn Wells
- [PATCH 03/21] Updated package_screen_installed
Shawn Wells
- [PATCH 0/2] adding columns to output table
Shawn Wells
- [PATCH 0/2] transform to create STIG tables based on overlay
Shawn Wells
- [PATCH 0/2] transform to create STIG tables based on overlay
Shawn Wells
- Polyinstantiation of /tmp and /var/tmp and CGroups....
Shawn Wells
- Remediation Scripts
Shawn Wells
- [Open-scap] Remediation Scripts
Shawn Wells
- Remediation Scripts
Shawn Wells
- Signed content purpose question
Shawn Wells
- [PATCH 2/2] Bash Fixes: Adding fixes to remove NIS inclusions from /etc/passwd /etc/shadow and /etc/groups
Shawn Wells
- [Open-scap] Remediation Scripts
Shawn Wells
- Remediation Scripts
Shawn Wells
- [PATCH] Example remediation templates
Shawn Wells
- Remediation Scripts
Shawn Wells
- Remediation Scripts
Shawn Wells
- [PATCH] Added refine-value of 1 for var_password_min_age to profile stig-rhel6-server (UNCLASSIFIED)
Shawn Wells
- [PATCH] Update to put fix content common functions into plain-text elements
Shawn Wells
- [PATCH] Update to put fix content common functions into plain-text elements
Shawn Wells
- [PATCH] Update to put fix content common functions into plain-text elements
Shawn Wells
- [PATCH] Update to put fix content common functions into plain-text elements
Shawn Wells
- [PATCH] Added refine-value of 1 for var_password_min_age to profile stig-rhel6-server (UNCLASSIFIED)
Shawn Wells
- [PATCH] added NIST 800-53 rev3 in XML format to references folder
Shawn Wells
- [PATCH] improvements to aesthetics for table display
Shawn Wells
- [PATCH] CCE fixes
Shawn Wells
- [PATCH 1/5] Updated XCCDF and OVAL of groupowner_rsyslog_files
Shawn Wells
- [PATCH 2/5] Fixed rsyslog_files_ownership OVAL
Shawn Wells
- [PATCH 3/5] Created bash remediation
Shawn Wells
- [PATCH 4/5] Created remediation
Shawn Wells
- [PATCH 5/5] Enabled OVAL for service_ntpdate_disabled
Shawn Wells
- [PATCH 0/2] CCE sanity checking
Shawn Wells
- [PATCH 5/5] Enabled OVAL for service_ntpdate_disabled
Shawn Wells
- [PATCH 1/5] Updated XCCDF and OVAL of groupowner_rsyslog_files
Shawn Wells
- [PATCH 1/5] Updated XCCDF and OVAL of groupowner_rsyslog_files
Shawn Wells
- [PATCH] removal of Rule which does not apply to rsyslog
Shawn Wells
- [PATCH] removal of Rule which does not apply to rsyslog
Shawn Wells
- help with OVAL transforms
Shawn Wells
- [PATCH] Ticket 396 - OVAL needed for file_ownership_library_dirs
Shawn Wells
- [PATCH] Ticket 396 - OVAL needed for file_ownership_library_dirs
Shawn Wells
- [PATCH 1/2] (resubmit) Ticket 396 - OVAL needed for file_ownership_library_dirs
Shawn Wells
- [PATCH 2/2] Request for review - OVAL for file_permissions_library_dirs - unix:file_state issues
Shawn Wells
- [PATCH] [bugfix] Ticket 168 - iptables_smtp_enabled false positive
Shawn Wells
- [PATCH] [bugfix] Ticket 169 - False positive - postfix_logging
Shawn Wells
- [PATCH] [bugfix] Ticket 170 - False Positive - postfix_server_denial_of_service
Shawn Wells
- [PATCH 0/3] OVAL update of set_password_hashing_algorithm
Shawn Wells
- [PATCH 1/3] Created OVAL for set_password_hashing_algorithm_systemauth
Shawn Wells
- [PATCH 2/3] Created OVAL for set_password_hashing_algorithm_logindefs
Shawn Wells
- [PATCH 3/3] Created OVAL for set_password_hashing_algorithm_libuserconf
Shawn Wells
- [PATCH] [bugfix] Ticket 381 - Rule "disable_telnet_service" always true
Shawn Wells
- [PATCH] [bugfix] Ticket 382 - Rule "Disable tftp Service" always true
Shawn Wells
- [PATCH] [bugfix] Ticket Rule "disable_at" duplicate "service_atd_disabled"
Shawn Wells
- [PATCH] [bugfix] Ticket 114 - pattern match of RHEL6/input/checks/file_owner_ldap_server_files.xml
Shawn Wells
- [PATCH]=?UTF-8?q?[bugfix]=20Ticket=20113=20-=20RHEL6/input/checks/file=5Fgroupowner=5Fldap=5Fserver=5Ffiles.xml=20invalid=20regex
Shawn Wells
- [PATCH] [bugfix] Ticket 388 - set_sysctl_net_ipv4_conf_default_accept_source_route pointed to wrong OVAL
Shawn Wells
- [PATCH] [bugfix] OVAL partition IDs != filenames
Shawn Wells
- help with OVAL transforms
Shawn Wells
- EXT :Re: [scap-security-guide] #174: False positive: enable_auditd_bootloader
Shawn Wells
- [PATCH 1/2] (resubmit) Ticket 396 - OVAL needed for file_ownership_library_dirs
Shawn Wells
- RHEL6
Shawn Wells
- [PATCH 0/3] OVAL update of set_password_hashing_algorithm
Shawn Wells
- RHEL6
Shawn Wells
- RHEL6
Shawn Wells
- [PATCH 0/2] updated library file permissions check
Shawn Wells
- RHEL6
Shawn Wells
- SCAP 1.2 DataStream File Format
Shawn Wells
- Fwd: [Open-scap] Video preview of the OSCAP Anaconda addon
Shawn Wells
- [PATCH 2/2] Duplicate state ids fixed, fixed reversed version and release info for the auxillary key
Shawn Wells
- [PATCH] improved verify-references.py to not flag OVAL definitions which are extended by others as unused
Shawn Wells
- [PATCH] improved verify-references.py to not flag OVAL definitions which are extended by others as unused
Shawn Wells
- [PATCH] [bugfix] Ticket 114 - pattern match of RHEL6/input/checks/file_owner_ldap_server_files.xml
Shawn Wells
- [PATCH] [bugfix] OVAL partition IDs != filenames
Shawn Wells
- [PATCH] [bugfix] Ticket 382 - Rule "Disable tftp Service" always true
Shawn Wells
- [PATCH] [bugfix] Ticket 381 - Rule "disable_telnet_service" always true
Shawn Wells
- [PATCH] [bugfix] Ticket 388 - set_sysctl_net_ipv4_conf_default_accept_source_route pointed to wrong OVAL
Shawn Wells
- [PATCH] [bugfix] Ticket 168 - iptables_smtp_enabled false positive
Shawn Wells
- [PATCH] [bugfix] Ticket 170 - False Positive - postfix_server_denial_of_service
Shawn Wells
- [PATCH 01/11] Updated NIST Auxiliary mappings for AC-2
Shawn Wells
- [PATCH 02/11] Mapped AC-2(7)(a) to nist_not_OS_applicable
Shawn Wells
- [PATCH 03/11] Mapped NIST AC-3(3) to several SELinux enablement clauses
Shawn Wells
- [PATCH 04/11] Mapped service_restorecond_enabled to AC-3(3)
Shawn Wells
- [PATCH 05/11] Added AC-8(b) to mappings
Shawn Wells
- [PATCH 06/11] Updated max_concurrent_login_sessions
Shawn Wells
- [PATCH 07/11] Removed NIST AC-11 mapping for no_uidzero_except_root
Shawn Wells
- [PATCH 08/11] Mapped AC-14 to nist_met_inherently
Shawn Wells
- [PATCH 09/11] Created not_cds in NIST auxiliary
Shawn Wells
- [PATCH 10/11] [bugfix] Ticket 114 - pattern match of RHEL6/input/checks/file_owner_ldap_server_files.xml
Shawn Wells
- [PATCH 11/11] Started FISMA Medium RHEL6 Server profile
Shawn Wells
- [PATCH 10/11] [bugfix] Ticket 114 - pattern match of RHEL6/input/checks/file_owner_ldap_server_files.xml
Shawn Wells
- git service down?
Shawn Wells
- [PATCH 00/64] patchbomb: NIST mappings and FISMA profile expansion
Shawn Wells
- [PATCH 01/64] Remapped sshd_allow_only_protocol2
Shawn Wells
- [PATCH 02/64] Acced AC-17(8) mappings to bluetooth and wireless
Shawn Wells
- [PATCH 03/64] Remapped AT-* to nist_not_OS_applicable
Shawn Wells
- [PATCH 04/64] Remapped AU-1(a) to nist_not_OS_applicable
Shawn Wells
- [PATCH 05/64] Refined NIST granularity of postfix_logging
Shawn Wells
- [PATCH 06/64] Refined granularity of ldap_server_config_logging to AU-2(a)
Shawn Wells
- [PATCH 07/64] Mapped AU-2(3) to nist_not_OS_applicable
Shawn Wells
- [PATCH 08/64] Mapped /var/log/audit partition to partition_for_var_log_audit
Shawn Wells
- [PATCH 09/64] Mapped configure_auditd_action_mail_acct to AU-5(a)
Shawn Wells
- [PATCH 10/64] Mapped configure_auditd_admin_space_left_action to AU-5(d)
Shawn Wells
- [PATCH 11/64] Mapped AU-6(1) and AU-6(3) to nist_not_OS_applicable
Shawn Wells
- [PATCH 12/64] Mapped AU-7* to nist_not_OS_applicable
Shawn Wells
- [PATCH 13/64] Removed AU-8 mapping for service_ntpdate_disabled
Shawn Wells
- [PATCH 14/64] Mapped rsyslog to AU-9(2)
Shawn Wells
- [PATCH 15/64] Mapped AU-10 to audit enablement rules
Shawn Wells
- [PATCH 16/64] Mapped sshd_use_approved_ciphers to AU-10(5)
Shawn Wells
- [PATCH 17/64] [bugfix] nist_procedural_requirement missing comma
Shawn Wells
- [PATCH 18/64] Mapped CM-3(c) to iptables enablement
Shawn Wells
- [PATCH 19/64] Remapped CA-7 to nist_not_OS_applicable
Shawn Wells
- [PATCH 20/64] Remapped CM-1 to nist_not_OS_applicable
Shawn Wells
- [PATCH 21/64] Remapped CM-2 to nist_not_OS_applicable
Shawn Wells
- [PATCH 22/64] Mapped CM-3(d),CM-3(e) to AIDE
Shawn Wells
- [PATCH 23/64] Mapped CM-3(2) to nist_not_OS_applicable
Shawn Wells
- [PATCH 24/64] Mapped CM-3 to nist_not_OS_applicable
Shawn Wells
- [PATCH 25/64] Mapped CM-5 to nist_not_OS_applicable
Shawn Wells
- [PATCH 26/64] Expansion of NIST auxiliary mappings
Shawn Wells
- [PATCH 27/64] Further expansion of FISMA moderate profile
Shawn Wells
- [PATCH 28/64] Mapped IA-2 to nist_met_inherently
Shawn Wells
- [PATCH 29/64] Mapped IA-2 against no_uidzero_except_root sshd_disable_root_login and new no_direct_root_logins
Shawn Wells
- [PATCH 30/64] Mapped IA-2(1) to bootloader_password
Shawn Wells
- [PATCH 31/64] Mapped IA-4* to nist_not_OS_applicable
Shawn Wells
- [PATCH 32/64] Mapped IA-4(4) to nist_not_OS_applicable
Shawn Wells
- [PATCH 33/64] Removed mapping of IA-4 to disable_interactive_boot
Shawn Wells
- [PATCH 34/64] Refined IA-5 mappings of PAM
Shawn Wells
- [PATCH 35/64] Added IA-5(c) mappings to PAM
Shawn Wells
- [PATCH 36/64] Added granularity to IA-5* checks for PAM
Shawn Wells
- [PATCH 37/64] Changed default value of var_password_max_age from 90 to 60
Shawn Wells
- [PATCH 38/64] Additional refinement of IA-5 mappings to PAM
Shawn Wells
- [PATCH 39/64] Refined IA-5 mappings in password_storage.xml
Shawn Wells
- [PATCH 40/64] Remapped require_singleuser_auth
Shawn Wells
- [PATCH 41/64] Added IA-5(1) mappings
Shawn Wells
- [PATCH 42/64] Added mapping to IA-5(1)(b) for password_require_diffchars
Shawn Wells
- [PATCH 43/64] Mapped IA-5(1)(d) to password min/max length rules
Shawn Wells
- [PATCH 44/64] Mapped IA-5(1)(c) to "Set Password Hashing in..." rules
Shawn Wells
- [PATCH 45/64] Updated SSH mappings for IA-5(1)(c)
Shawn Wells
- [PATCH 46/64] Mapped telnet and rsh to IA-5(1)(c)
Shawn Wells
- [PATCH 47/64] Mapped IA-5(1)(e) to password_history_retain
Shawn Wells
- [PATCH 48/64] Added NIST mappings to auxiliary file
Shawn Wells
- [PATCH 49/64] Mapped IA-5(6) to nist_not_OS_applicable
Shawn Wells
- [PATCH 50/64] Mapped IA-5(7) to OS NA
Shawn Wells
- [PATCH 51/64] Mapped IA-6 to nist_met_inherently
Shawn Wells
- [PATCH 52/64] Updated FISMA profile to reflect all IA controls
Shawn Wells
- [PATCH 53/64] Mapped IA-7 to Password Hashing and FIPS
Shawn Wells
- [PATCH 54/64] Mapped IA-8 to nist_met_inherently
Shawn Wells
- [PATCH 55/64] Mapped IR-1 to nist_not_OS_applicable
Shawn Wells
- [PATCH 56/64] Mapped IR-2 to nist_not_OS_applicable
Shawn Wells
- [PATCH 57/64] Mapped IR-3 to nist_not_OS_applicable
Shawn Wells
- [PATCH 58/64] Mapped IR-4 to nist_not_OS_applicable
Shawn Wells
- [PATCH 59/64] Mapped IR-5 to audit requirements
Shawn Wells
- [PATCH 60/64] Mapped IR-6 to nist_not_OS_applicable
Shawn Wells
- [PATCH 61/64] Mapped IR-7 to nist_not_OS_applicable
Shawn Wells
- [PATCH 62/64] Mapped IR-8 to nist_not_OS_applicable
Shawn Wells
- [PATCH 63/64] Mapped MA-1(a) to nist_not_OS_applicable
Shawn Wells
- [PATCH 64/64] Mapped MA-1(b) to yum controls
Shawn Wells
- [PATCH 01/11] Updated NIST Auxiliary mappings for AC-2
Shawn Wells
- [PATCH 0/2] minor description fixups in Groups
Shawn Wells
- domain name ideas?
Shawn Wells
- domain name ideas?
Shawn Wells
- SCAP 1.2 DataStream File Format
Shawn Wells
- [PATCH 2/3] deletion of introductory text with obsolete tone
Shawn Wells
- [PATCH 3/3] minor edits to AIDE description
Shawn Wells
- [PATCH 0/3] more edits in preparation for prose guide issuance
Shawn Wells
- [scap-security-guide] #172: False positive: service_rdisk_disabled
scap-security-guide
- [scap-security-guide] #173: False positive: service_saslauthd_disabled
scap-security-guide
- [scap-security-guide] #174: False positive: enable_auditd_bootloader
scap-security-guide
- [scap-security-guide] #183: False positive: disable_sysctl_ipv4_default_send_redirect
scap-security-guide
- [scap-security-guide] #184: False positive: disable_sysctl_ipv4_ip_forward
scap-security-guide
- [scap-security-guide] #185: False positive: set_sysctl_net_ipv4_conf_all_accept_source_route
scap-security-guide
- [scap-security-guide] #186: False positive: set_sysctl_net_ipv4_conf_all_accept_redirects
scap-security-guide
- [scap-security-guide] #187: False positive: set_sysctl_net_ipv4_conf_all_secure_redirects
scap-security-guide
- [scap-security-guide] #189: False positive: set_sysctl_net_ipv4_conf_default_accept_source_route
scap-security-guide
- [scap-security-guide] #190: False positive: set_sysctl_net_ipv4_conf_default_accept_redirects
scap-security-guide
- [scap-security-guide] #191: False positive: set_sysctl_net_ipv4_conf_default_secure_redirects
scap-security-guide
- [scap-security-guide] #192: False positive: set_sysctl_net_ipv4_icmp_echo_ignore_broadcasts
scap-security-guide
- [scap-security-guide] #193: False positive: set_sysctl_net_ipv4_icmp_ignore_bogus_error_responses
scap-security-guide
- [scap-security-guide] #194: False positive: set_sysctl_net_ipv4_tcp_syncookies
scap-security-guide
- [scap-security-guide] #195: False positive: set_sysctl_net_ipv4_conf_all_rp_filter
scap-security-guide
- [scap-security-guide] #196: False positive: set_sysctl_net_ipv4_conf_default_rp_filter
scap-security-guide
- [scap-security-guide] #201: False positive: enable_randomize_va_space
scap-security-guide
- [scap-security-guide] #114: RHEL6/input/checks/file_owner_ldap_server_files.xml
scap-security-guide
- [scap-security-guide] #169: False positive: postfix_logging
scap-security-guide
- [scap-security-guide] #383: Rule "disable_at" dublicate "service_atd_disabled"
scap-security-guide
- [scap-security-guide] #382: Rule "Disable tftp Service" always true
scap-security-guide
- [scap-security-guide] #381: Rule "disable_telnet_service" always true
scap-security-guide
- [scap-security-guide] #388: Inaccuracy in description for "set_sysctl_net_ipv4_conf_default_accept_source_route" rule
scap-security-guide
- [scap-security-guide] #170: False positive: postfix_server_denial_of_service
scap-security-guide
- [scap-security-guide] #397: OVAL needed for file_permissions_binary_dirs
scap-security-guide
- [Open-scap] Remediation Scripts
david.oliva at verizon.net
Last message date:
Tue Apr 30 20:33:56 UTC 2013
Archived on: Tue Apr 30 20:34:00 UTC 2013
This archive was generated by
Pipermail 0.09 (Mailman edition).