[PATCH 1/2] Created remediation template
Steve Grubb
sgrubb at redhat.com
Thu Jul 18 14:07:33 UTC 2013
On Wednesday, July 17, 2013 10:07:30 PM Shawn Wells wrote:
> IIRC, the 'chkconfig --level 0123456' came from the DoD Consensus
> meeting when someone asked "what if I redefine the run levels, and then
> audit doesn't start?!"
If you redefine the runlevels, then you are way out on a limb and not a
standard RHEL. You have a level of customization not easily covered by docs
like this. This must be aimed at a standard RHEL so that on such a machine you
do not get daemons when you are supposed to be in single user mode.
If you need it on for all levels, that would generally be 2345. Using
"chkconfig $DAEMON on" generally does the right thing. Using --levels might
cause daemons used during X windows to be active during a console session and
vice versa.
-Steve
More information about the scap-security-guide
mailing list