[PATCH 0/5] Additional profile, two new rules, one modified rule, and a modified transform

Jeffrey Blank blank at eclipse.ncsc.mil
Fri Jul 26 19:01:02 UTC 2013


It compiles!  Ship it!

I mean, please push.


On Thu, Jul 25, 2013 at 12:38 PM, David Smith <dsmith at eclipse.ncsc.mil>wrote:

> I needed to build an example custom profile, which led to the following:
>
> 1) a new profile
> 2) two new rules added specifically for the new profile
> 3) an additional option for selecting the number of max concurrent logins
> 4) modifications to the xccdf-addprofiles transform, to include the new
> profile in the build process
>
>
> David Smith (5):
>   added example of a custom profile
>   modified transform to include new profile
>   Added rule regarding anonymous NFS connections
>   Additional option for number of max concurrent logins
>   Added rule for disabling interface use of IPv6
>
>  RHEL6/input/profiles/CS2.xml            |  380
> +++++++++++++++++++++++++++++++
>  RHEL6/input/services/nfs.xml            |   11 +
>  RHEL6/input/system/accounts/session.xml |    1 +
>  RHEL6/input/system/network/ipv6.xml     |    9 +-
>  RHEL6/transforms/xccdf-addprofiles.xslt |    1 +
>  5 files changed, 401 insertions(+), 1 deletions(-)
>  create mode 100644 RHEL6/input/profiles/CS2.xml
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130726/a27dcd2e/attachment.html>


More information about the scap-security-guide mailing list