[PATCH] [bugfix] Updated URN for bash fix scripts

Shawn Wells shawn.d.wells at gmail.com
Tue Feb 5 16:19:43 UTC 2013


-------------- next part --------------
>From 0e6661e62f034e6f50c9341d9da934b187331fe6 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Tue, 5 Feb 2013 11:16:16 -0500
Subject: [PATCH] [bugfix] Updated URN for bash fix scripts

The existing URN (urn:xccdf:fix:script:bash) would not generate proper
fix scripts. Needed to be changed to urn:xccdf:fix:script:sh

Thank you to Brian M. for reporting

Before the change:
$ oscap xccdf generate fix --result-id xccdf_org.open-scap_testresult_stig-rhel6-server /tmp/stig-results.xml

After the change:
$ oscap xccdf generate fix --result-id xccdf_org.open-scap_testresult_stig-rhel6-server /tmp/stig-results.xml

yum install aide
---
 RHEL6/input/fixes/bash-ks.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/fixes/bash-ks.xml b/RHEL6/input/fixes/bash-ks.xml
index 7550b9f..a034d3b 100644
--- a/RHEL6/input/fixes/bash-ks.xml
+++ b/RHEL6/input/fixes/bash-ks.xml
@@ -1,4 +1,4 @@
-<fix-group id="bash" system="urn:xccdf:fix:script:bash" xmlns="http://checklists.nist.gov/xccdf/1.1">
+<fix-group id="bash" system="urn:xccdf:fix:script:sh" xmlns="http://checklists.nist.gov/xccdf/1.1">
 <fix rule="disable_vsftp">service vsftpd stop</fix>
 <fix rule="install_aide">yum install aide</fix>
 </fix-group>
-- 
1.7.1



More information about the scap-security-guide mailing list