Patch to "RHEL6/input/checks/sysconfig_networking_bootproto_ifcfg.xml"
Rui Pedro Bernardino
rui-p-bernardino at ptinovacao.pt
Wed Jul 10 11:17:14 UTC 2013
Hi all,
I think there's a mistake on how sysconfig_networking_bootproto_ifcfg checks whether dhcp client is enabled. According to RHEL6 docs, BOOTPROTO should be one of "none", "bootp" or "dhcp" and not "static"; /sbin/ifup assumes static IP configuration unless either "dhcp" or "bootp" is specified.
I suggest altering the check from 'equals to "static"' to 'anything but "dhcp" or "bootp"', which matches how it will be applied.
*** 22,28 ****
</ind:textfilecontent54_test>
<ind:textfilecontent54_state id="state_20135"
version="1">
! <ind:subexpression operation="equals">static</ind:subexpression>
</ind:textfilecontent54_state>
<ind:textfilecontent54_object id="obj_20135"
version="1">
--- 22,28 ----
</ind:textfilecontent54_test>
<ind:textfilecontent54_state id="state_20135"
version="1">
! <ind:subexpression operation="pattern match">[^(dhcp|bootp)]</ind:subexpression>
</ind:textfilecontent54_state>
<ind:textfilecontent54_object id="obj_20135"
version="1">
Regards
--
Rui Pedro Bernardino
CTE2/Tecnologias e Desenvolvimento
PT Inovação
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130710/ec5f99a6/attachment-0001.html>
More information about the scap-security-guide
mailing list