[PATCH] Another big batch of updates

Jeffrey Blank blank at eclipse.ncsc.mil
Thu Aug 22 01:20:08 UTC 2013


> I also added rsyslog to the template file for installed packages, since
it was apparently missing,
> even though the compiled check had been added in a previous commit.

Huh, odd.

Thanks very much for the testing, and consider this ACK'ed.  Unless they're
egregiously wrong, I would not devote effort to fixing up descriptions in
each OVAL check.  Does anyone know: is this displayed by any evaluation
tooling?  Is there an XCCDF element that would be preferred for automatic
insertion here?





On Mon, Aug 19, 2013 at 8:31 PM, Maura Dailey <maura at eclipse.ncsc.mil>wrote:

> I went through a whole bunch more checks, tested them, tweaked their regex
> as necessary, and corrected comment fields. I also ran them through tidy
> and fixed them up a little. A few checks had "dead states" which were never
> referenced in a test field, so I deleted those.
>
> I also added rsyslog to the template file for installed packages, since it
> was apparently missing, even though the compiled check had been added in a
> previous commit.
>
> - Maura Dailey
>
> Maura Dailey (1):
>   Another batch of tested checks. Includes some checks that had their
>     comments expanded or were renamed from random values.
>
>  RHEL6/input/checks/banner_etc_issue.xml            |    1 +
>  .../checks/dovecot_disable_plaintext_auth.xml      |   10 ++++---
>  RHEL6/input/checks/dovecot_enable_ssl.xml          |   12 ++++----
>  .../input/checks/logwatch_configured_hostlimit.xml |    8 ++---
>  .../checks/logwatch_configured_splithosts.xml      |   10 +++----
>  RHEL6/input/checks/network_sniffer_disabled.xml    |    1 +
>  RHEL6/input/checks/ntp_remote_server.xml           |   27
> +++++++++----------
>  .../checks/postfix_network_listening_disabled.xml  |   26
> +++++++++---------
>  RHEL6/input/checks/postfix_server_banner.xml       |   17 ++++--------
>  RHEL6/input/checks/restrict_serial_port_logins.xml |    7 +++--
>  .../checks/securetty_root_login_console_only.xml   |    5 ++-
>  RHEL6/input/checks/selinux_mode.xml                |    9 ++++--
>  RHEL6/input/checks/selinux_policytype.xml          |   18 +++++--------
>  .../set_password_hashing_algorithm_libuserconf.xml |    3 +-
>  .../set_password_hashing_algorithm_logindefs.xml   |    5 ++-
>  RHEL6/input/checks/singleuser_password.xml         |   19 ++++++--------
>  RHEL6/input/checks/smb_client_signing_smb_conf.xml |   23
> +++++++++--------
>  .../sysconfig_networking_bootproto_ifcfg.xml       |   20 +++++++-------
>  RHEL6/input/checks/sysconfig_nozeroconf_yes.xml    |   22 +++++++---------
>  .../input/checks/system_info_architecture_x86.xml  |   22 ++++++++--------
>  .../checks/system_info_architecture_x86_64.xml     |   22 ++++++++--------
>  .../input/checks/templates/packages_installed.csv  |    3 +-
>  RHEL6/input/checks/tftpd_uses_secure_mode.xml      |    3 +-
>  RHEL6/input/checks/xwindows_runlevel_setting.xml   |    3 +-
>  24 files changed, 146 insertions(+), 150 deletions(-)
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130821/571c7718/attachment-0001.html>


More information about the scap-security-guide mailing list