[PATCH 0/2] Generated remediations for service_*_disabled & package_*_installed

Shawn Wells shawn at redhat.com
Mon Jul 15 13:38:34 UTC 2013


On 7/7/13 3:38 AM, Shawn Wells wrote:
>
> 0000-cover-letter.patch
>
>
>  From 6a60667211c912cf3fd3fe80e712c86b192a946f Mon Sep 17 00:00:00 2001
> From: Shawn Wells<shawn at redhat.com>
> Date: Sun, 7 Jul 2013 03:25:36 -0400
> Subject: [PATCH 0/2] Generated remediations for service_*_disabled & package_*_installed
>
> Generated bash remedations for service_*_disabled and
> package_*_installed
>
> Shawn Wells (2):
>    Generated service_*_disabled.sh remediations      Generated through
>      template process:
>    Added package_*_installed remediations from template
>
>   RHEL6/input/checks/package_talk-server_removed.xml |   25 ++++++++++++++++++++
>   RHEL6/input/fixes/bash/package_audit_installed.sh  |    1 +
>   RHEL6/input/fixes/bash/package_cronie_installed.sh |    1 +
>   .../fixes/bash/package_iptables-ipv6_installed.sh  |    1 +
>   .../input/fixes/bash/package_iptables_installed.sh |    1 +
>   .../fixes/bash/package_irqbalance_installed.sh     |    1 +
>   RHEL6/input/fixes/bash/package_ntp_installed.sh    |    1 +
>   .../input/fixes/bash/package_openswan_installed.sh |    1 +
>   .../bash/package_policycoreutils_installed.sh      |    1 +
>   .../input/fixes/bash/package_postfix_installed.sh  |    1 +
>   RHEL6/input/fixes/bash/package_psacct_installed.sh |    1 +
>   RHEL6/input/fixes/bash/package_vsftpd_installed.sh |    1 +
>   RHEL6/input/fixes/bash/service_abrtd_disabled.sh   |    9 +++++++
>   RHEL6/input/fixes/bash/service_acpid_disabled.sh   |    9 +++++++
>   RHEL6/input/fixes/bash/service_atd_disabled.sh     |    9 +++++++
>   RHEL6/input/fixes/bash/service_autofs_disabled.sh  |    9 +++++++
>   .../fixes/bash/service_avahi-daemon_disabled.sh    |    9 +++++++
>   .../input/fixes/bash/service_bluetooth_disabled.sh |    9 +++++++
>   .../fixes/bash/service_certmonger_disabled.sh      |    9 +++++++
>   .../input/fixes/bash/service_cgconfig_disabled.sh  |    9 +++++++
>   RHEL6/input/fixes/bash/service_cgred_disabled.sh   |    9 +++++++
>   .../input/fixes/bash/service_cpuspeed_disabled.sh  |    9 +++++++
>   RHEL6/input/fixes/bash/service_cups_disabled.sh    |    9 +++++++
>   RHEL6/input/fixes/bash/service_dhcpd_disabled.sh   |    9 +++++++
>   RHEL6/input/fixes/bash/service_dovecot_disabled.sh |    9 +++++++
>   .../input/fixes/bash/service_haldaemon_disabled.sh |    9 +++++++
>   RHEL6/input/fixes/bash/service_httpd_disabled.sh   |    9 +++++++
>   RHEL6/input/fixes/bash/service_kdump_disabled.sh   |    9 +++++++
>   .../input/fixes/bash/service_mdmonitor_disabled.sh |    9 +++++++
>   .../fixes/bash/service_messagebus_disabled.sh      |    9 +++++++
>   RHEL6/input/fixes/bash/service_named_disabled.sh   |    9 +++++++
>   .../fixes/bash/service_netconsole_disabled.sh      |    9 +++++++
>   RHEL6/input/fixes/bash/service_netfs_disabled.sh   |    9 +++++++
>   RHEL6/input/fixes/bash/service_nfs_disabled.sh     |    9 +++++++
>   RHEL6/input/fixes/bash/service_nfslock_disabled.sh |    9 +++++++
>   RHEL6/input/fixes/bash/service_oddjobd_disabled.sh |    9 +++++++
>   .../fixes/bash/service_portreserve_disabled.sh     |    9 +++++++
>   RHEL6/input/fixes/bash/service_qpidd_disabled.sh   |    9 +++++++
>   .../input/fixes/bash/service_quota_nld_disabled.sh |    9 +++++++
>   RHEL6/input/fixes/bash/service_rdisc_disabled.sh   |    9 +++++++
>   RHEL6/input/fixes/bash/service_rhnsd_disabled.sh   |    9 +++++++
>   .../input/fixes/bash/service_rhsmcertd_disabled.sh |    9 +++++++
>   RHEL6/input/fixes/bash/service_rpcgssd_disabled.sh |    9 +++++++
>   .../input/fixes/bash/service_rpcidmapd_disabled.sh |    9 +++++++
>   .../fixes/bash/service_rpcsvcgssd_disabled.sh      |    9 +++++++
>   .../input/fixes/bash/service_saslauthd_disabled.sh |    9 +++++++
>   RHEL6/input/fixes/bash/service_smartd_disabled.sh  |    9 +++++++
>   RHEL6/input/fixes/bash/service_smb_disabled.sh     |    9 +++++++
>   RHEL6/input/fixes/bash/service_snmpd_disabled.sh   |    9 +++++++
>   RHEL6/input/fixes/bash/service_squid_disabled.sh   |    9 +++++++
>   RHEL6/input/fixes/bash/service_sshd_disabled.sh    |    9 +++++++
>   RHEL6/input/fixes/bash/service_sysstat_disabled.sh |    9 +++++++
>   RHEL6/input/fixes/bash/service_tftp_disabled.sh    |    9 +++++++
>   RHEL6/input/fixes/bash/service_vsftpd_disabled.sh  |    9 +++++++
>   RHEL6/input/fixes/bash/service_xinetd_disabled.sh  |    9 +++++++
>   RHEL6/input/fixes/bash/service_ypbind_disabled.sh  |    9 +++++++
>   56 files changed, 432 insertions(+), 0 deletions(-)
>   create mode 100644 RHEL6/input/checks/package_talk-server_removed.xml
>   create mode 100644 RHEL6/input/fixes/bash/package_audit_installed.sh
>   create mode 100644 RHEL6/input/fixes/bash/package_cronie_installed.sh
>   create mode 100644 RHEL6/input/fixes/bash/package_iptables-ipv6_installed.sh
>   create mode 100644 RHEL6/input/fixes/bash/package_iptables_installed.sh
>   create mode 100644 RHEL6/input/fixes/bash/package_irqbalance_installed.sh
>   create mode 100644 RHEL6/input/fixes/bash/package_ntp_installed.sh
>   create mode 100644 RHEL6/input/fixes/bash/package_openswan_installed.sh
>   create mode 100644 RHEL6/input/fixes/bash/package_policycoreutils_installed.sh
>   create mode 100644 RHEL6/input/fixes/bash/package_postfix_installed.sh
>   create mode 100644 RHEL6/input/fixes/bash/package_psacct_installed.sh
>   create mode 100644 RHEL6/input/fixes/bash/package_vsftpd_installed.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_abrtd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_acpid_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_atd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_autofs_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_avahi-daemon_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_bluetooth_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_certmonger_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_cgconfig_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_cgred_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_cpuspeed_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_cups_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_dhcpd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_dovecot_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_haldaemon_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_httpd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_kdump_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_mdmonitor_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_messagebus_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_named_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_netconsole_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_netfs_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_nfs_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_nfslock_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_oddjobd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_portreserve_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_qpidd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_quota_nld_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_rdisc_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_rhnsd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_rhsmcertd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_rpcgssd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_rpcidmapd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_rpcsvcgssd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_saslauthd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_smartd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_smb_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_snmpd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_squid_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_sshd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_sysstat_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_tftp_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_vsftpd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_xinetd_disabled.sh
>   create mode 100644 RHEL6/input/fixes/bash/service_ypbind_disabled.sh
>
Bump on this for review
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130715/7de8e8bb/attachment-0001.html>


More information about the scap-security-guide mailing list