telnet section
Truhn, Chad M CTR NSWCDD, CXA30
chad.m.truhn.ctr at navy.mil
Thu Aug 1 16:44:41 UTC 2013
> And here is my take: There might be organization which will need to have a package (like acpid) installed (for some inevitable monthly use-case) but they would agree that it should not be run by deafult. Such organization could easily use tailoring feature to turn-off the `uninstall` check.
+1
I tried to come up with a way of saying this earlier, but couldn't figure out a good way. I do know that people do use these guides for some in-house policy creation stuff.
That being said - I don't know if I am convinced the good (rare cases like this) outweighs the harm (false positives and redundancy to the masses).
- Chad
More information about the scap-security-guide
mailing list