[PATCH 4/5] removed a rule

Shawn Wells shawn at redhat.com
Tue Jan 15 22:13:48 UTC 2013


On 1/15/13 5:05 PM, David Smith wrote:
> -<Rule id="network_disable_unused_interfaces">
> +<!-- <Rule id="network_disable_unused_interfaces">
>   <title>Disable Unused Interfaces</title>
>   <description>If the system does not require network communications but still
>   needs to use the loopback interface, remove all files of the form
> @@ -28,10 +28,10 @@ communication over the loopback device, then disable this service.
>   <rationale>The network interfaces expand the attack surface of a system.
>   Although unusual, if they are not needed they should be disabled.
>   </rationale>
> -<!--<ident cce="TODO" />-->
> -<!--TODO:MANUAL<oval id="network_disable_unused_interfaces" />-->
> +<ident cce="TODO" />
> +-TODO:MANUAL<oval id="network_disable_unused_interfaces" />
>   <ref nist="CM-7" />
> -</Rule>
> +</Rule> -->
>   


Nack

Deselect this from the STIG profile, via selected=false.... still should 
be in the broader prose guide


More information about the scap-security-guide mailing list