[PATCH] Another big batch of updates
Jeffrey Blank
blank at eclipse.ncsc.mil
Thu Aug 22 01:20:08 UTC 2013
> I also added rsyslog to the template file for installed packages, since
it was apparently missing,
> even though the compiled check had been added in a previous commit.
Huh, odd.
Thanks very much for the testing, and consider this ACK'ed. Unless they're
egregiously wrong, I would not devote effort to fixing up descriptions in
each OVAL check. Does anyone know: is this displayed by any evaluation
tooling? Is there an XCCDF element that would be preferred for automatic
insertion here?
On Mon, Aug 19, 2013 at 8:31 PM, Maura Dailey <maura at eclipse.ncsc.mil>wrote:
> I went through a whole bunch more checks, tested them, tweaked their regex
> as necessary, and corrected comment fields. I also ran them through tidy
> and fixed them up a little. A few checks had "dead states" which were never
> referenced in a test field, so I deleted those.
>
> I also added rsyslog to the template file for installed packages, since it
> was apparently missing, even though the compiled check had been added in a
> previous commit.
>
> - Maura Dailey
>
> Maura Dailey (1):
> Another batch of tested checks. Includes some checks that had their
> comments expanded or were renamed from random values.
>
> RHEL6/input/checks/banner_etc_issue.xml | 1 +
> .../checks/dovecot_disable_plaintext_auth.xml | 10 ++++---
> RHEL6/input/checks/dovecot_enable_ssl.xml | 12 ++++----
> .../input/checks/logwatch_configured_hostlimit.xml | 8 ++---
> .../checks/logwatch_configured_splithosts.xml | 10 +++----
> RHEL6/input/checks/network_sniffer_disabled.xml | 1 +
> RHEL6/input/checks/ntp_remote_server.xml | 27
> +++++++++----------
> .../checks/postfix_network_listening_disabled.xml | 26
> +++++++++---------
> RHEL6/input/checks/postfix_server_banner.xml | 17 ++++--------
> RHEL6/input/checks/restrict_serial_port_logins.xml | 7 +++--
> .../checks/securetty_root_login_console_only.xml | 5 ++-
> RHEL6/input/checks/selinux_mode.xml | 9 ++++--
> RHEL6/input/checks/selinux_policytype.xml | 18 +++++--------
> .../set_password_hashing_algorithm_libuserconf.xml | 3 +-
> .../set_password_hashing_algorithm_logindefs.xml | 5 ++-
> RHEL6/input/checks/singleuser_password.xml | 19 ++++++--------
> RHEL6/input/checks/smb_client_signing_smb_conf.xml | 23
> +++++++++--------
> .../sysconfig_networking_bootproto_ifcfg.xml | 20 +++++++-------
> RHEL6/input/checks/sysconfig_nozeroconf_yes.xml | 22 +++++++---------
> .../input/checks/system_info_architecture_x86.xml | 22 ++++++++--------
> .../checks/system_info_architecture_x86_64.xml | 22 ++++++++--------
> .../input/checks/templates/packages_installed.csv | 3 +-
> RHEL6/input/checks/tftpd_uses_secure_mode.xml | 3 +-
> RHEL6/input/checks/xwindows_runlevel_setting.xml | 3 +-
> 24 files changed, 146 insertions(+), 150 deletions(-)
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130821/571c7718/attachment-0001.html>
More information about the scap-security-guide
mailing list