[PATCH 1/2] Created remediation template
Shawn Wells
shawn at redhat.com
Thu Jul 18 02:07:30 UTC 2013
On 7/15/13 10:45 AM, Andrew Gilmore wrote:
> On Mon, Jul 15, 2013 at 8:13 AM, Steve Grubb<sgrubb at redhat.com> wrote:
>> >Normally when you enable on all levels, that only means 2-5 inclusive. You
>> >don't turn things on for halt, reboot, or single user modes.
> I believe that part of the initscripts spec is that the service file
> itself specifies which runlevels it wants to be on, so
>
> chkconfig SERVICENAME on
>
> will set the runlevels as the service expects them.
Correct. From the auditd file, for example:
> #!/bin/bash
> #
> # auditd This starts and stops auditd
> #
> # chkconfig: 2345 11 88
IIRC, the 'chkconfig --level 0123456' came from the DoD Consensus
meeting when someone asked "what if I redefine the run levels, and then
audit doesn't start?!"
Personally, I don't have a strong opinion either way.
More information about the scap-security-guide
mailing list