Patch to "RHEL6/input/checks/sysconfig_networking_bootproto_ifcfg.xml"

Rui Pedro Bernardino rui-p-bernardino at ptinovacao.pt
Wed Jul 10 11:17:14 UTC 2013


Hi all,

I think there's a mistake on how sysconfig_networking_bootproto_ifcfg checks whether dhcp client is enabled. According to RHEL6 docs, BOOTPROTO should be one of "none", "bootp" or "dhcp" and not "static"; /sbin/ifup assumes static IP configuration unless either "dhcp" or "bootp" is specified.

I suggest altering the check from  'equals to  "static"' to 'anything but "dhcp" or "bootp"', which matches how it will be applied.

*** 22,28 ****
    </ind:textfilecontent54_test>
    <ind:textfilecontent54_state id="state_20135"
    version="1">
!     <ind:subexpression operation="equals">static</ind:subexpression>
    </ind:textfilecontent54_state>
    <ind:textfilecontent54_object id="obj_20135"
    version="1">
--- 22,28 ----
    </ind:textfilecontent54_test>
    <ind:textfilecontent54_state id="state_20135"
    version="1">
!     <ind:subexpression operation="pattern match">[^(dhcp|bootp)]</ind:subexpression>
    </ind:textfilecontent54_state>
    <ind:textfilecontent54_object id="obj_20135"
    version="1">

Regards

--
Rui Pedro Bernardino
CTE2/Tecnologias e Desenvolvimento
PT Inovação

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130710/ec5f99a6/attachment-0001.html>


More information about the scap-security-guide mailing list