[PATCH 1/2] Created remediation template

Steve Grubb sgrubb at redhat.com
Thu Jul 18 14:07:33 UTC 2013


On Wednesday, July 17, 2013 10:07:30 PM Shawn Wells wrote:
> IIRC, the 'chkconfig --level 0123456' came from the DoD Consensus 
> meeting when someone asked "what if I redefine the run levels, and then 
> audit doesn't start?!"

If you redefine the runlevels, then you are way out on a limb and not a 
standard RHEL. You have a level of customization not easily covered by docs 
like this. This must be aimed at a standard RHEL so that on such a machine you 
do not get daemons when you are supposed to be in single user mode.

If you need it on for all levels, that would generally be 2345. Using 
"chkconfig $DAEMON on" generally does the right thing. Using --levels might 
cause daemons used during X windows to be active during a console session and 
vice versa.

-Steve


More information about the scap-security-guide mailing list