[PATCH 4/5] removed a rule
Shawn Wells
shawn at redhat.com
Tue Jan 15 22:13:48 UTC 2013
On 1/15/13 5:05 PM, David Smith wrote:
> -<Rule id="network_disable_unused_interfaces">
> +<!-- <Rule id="network_disable_unused_interfaces">
> <title>Disable Unused Interfaces</title>
> <description>If the system does not require network communications but still
> needs to use the loopback interface, remove all files of the form
> @@ -28,10 +28,10 @@ communication over the loopback device, then disable this service.
> <rationale>The network interfaces expand the attack surface of a system.
> Although unusual, if they are not needed they should be disabled.
> </rationale>
> -<!--<ident cce="TODO" />-->
> -<!--TODO:MANUAL<oval id="network_disable_unused_interfaces" />-->
> +<ident cce="TODO" />
> +-TODO:MANUAL<oval id="network_disable_unused_interfaces" />
> <ref nist="CM-7" />
> -</Rule>
> +</Rule> -->
>
Nack
Deselect this from the STIG profile, via selected=false.... still should
be in the broader prose guide
More information about the scap-security-guide
mailing list