Various False Positives?
leam hall
leamhall at gmail.com
Wed Aug 28 16:04:29 UTC 2013
Hey all,
Just ran oscap with the xml files available on the website (Benchmark
version 0.9). Here are the issues that seem to be false positives. Prefix
everything with "RHEL-06-000". These are all marked as fail but the server
meets the STIG.
9 rhnsd can be on if configured to Satellite server or similar
57 ucredit
58 ocredit
59 lcredit
73 /etc/issue
98 No ipv6 installed
99 "
165 adjtimex
167 settimeofday
169 stime // Also, the STIG is wrong. There is no x86_64 stime syscall
171 clock_settime
184-196, 200 chmod, chown, etc...
206-211 No telnet installed or turned on
240 /etc/ssh/sshd_config Banner
271 If there are no removable partitions this is not a finding.
278 If the file permissions are more restrictive then it is not a finding.
324 No X running
326 "
346 Finding reported on umask 022
348 No vsftp installed, thus no file.
506 "hushlogin"
507 PrintLastLog
Am I confused in thinking a system in run level 3 should net need to worry
about X/Gnome findings?
Leam
--
Mind on a Mission <http://leamhall.blogspot.com/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130828/7983cc40/attachment.html>
More information about the scap-security-guide
mailing list