[PATCH 1/2] Created remediation template

Shawn Wells shawn at redhat.com
Thu Jul 18 02:07:30 UTC 2013


On 7/15/13 10:45 AM, Andrew Gilmore wrote:
> On Mon, Jul 15, 2013 at 8:13 AM, Steve Grubb<sgrubb at redhat.com>  wrote:
>> >Normally when you enable on all levels, that only means 2-5 inclusive. You
>> >don't turn things on for halt, reboot, or single user modes.
> I believe that part of the initscripts spec is that the service file
> itself specifies which runlevels it wants to be on, so
>
> chkconfig SERVICENAME on
>
> will set the runlevels as the service expects them.

Correct. From the auditd file, for example:
> #!/bin/bash
> #
> # auditd        This starts and stops auditd
> #
> # chkconfig: 2345 11 88


IIRC, the 'chkconfig --level 0123456' came from the DoD Consensus 
meeting when someone asked "what if I redefine the run levels, and then 
audit doesn't start?!"

Personally, I don't have a strong opinion either way.


More information about the scap-security-guide mailing list