telnet section

Truhn, Chad M CTR NSWCDD, CXA30 chad.m.truhn.ctr at navy.mil
Thu Aug 1 16:44:41 UTC 2013


> And here is my take: There might be organization which will need to have a package (like acpid) installed (for some inevitable monthly use-case) but they would agree that it should not be run by deafult. Such organization could easily use tailoring feature to turn-off the `uninstall` check.

+1

I tried to come up with a way of saying this earlier, but couldn't figure out a good way.  I do know that people do use these guides for some in-house policy creation stuff.

That being said - I don't know if I am convinced the good (rare cases like this) outweighs the harm (false positives and redundancy to the masses).

- Chad




More information about the scap-security-guide mailing list