[PATCH 4/4] Created service_*_disabled remediation scripts

Shawn Wells shawn.d.wells at gmail.com
Sat Jun 1 21:20:33 UTC 2013


-------------- next part --------------
>From d43b1d02d295afdbf954af076668843845ae4325 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Sat, 1 Jun 2013 17:11:16 -0400
Subject: [PATCH 4/4] Created service_*_disabled remediation scripts
 - Generated from template

Just to ensure things showup properly during script gen:
oscap xccdf eval --profile stig-rhel6-server --cpe ssg-rhel6-cpe-dictionary.xml --results /var/www/html/results/results.xml --report /var/www/html/report.html ssg-rhel6-xccdf.xml; oscap xccdf generate fix --result-id xccdf_org.open-scap_testresult_stig-rhel6-server /var/www/html/results/results.xml
....

chkconfig --level 0123456 autofs off

service autofs stop

.....
---
 RHEL6/input/fixes/bash/service_abrtd_disabled.sh   |    9 +++++++++
 RHEL6/input/fixes/bash/service_acpid_disabled.sh   |    9 +++++++++
 RHEL6/input/fixes/bash/service_atd_disabled.sh     |    9 +++++++++
 RHEL6/input/fixes/bash/service_autofs_disabled.sh  |    9 +++++++++
 .../fixes/bash/service_avahi-daemon_disabled.sh    |    9 +++++++++
 .../input/fixes/bash/service_bluetooth_disabled.sh |    9 +++++++++
 .../fixes/bash/service_certmonger_disabled.sh      |    9 +++++++++
 .../input/fixes/bash/service_cgconfig_disabled.sh  |    9 +++++++++
 RHEL6/input/fixes/bash/service_cgred_disabled.sh   |    9 +++++++++
 .../input/fixes/bash/service_cpuspeed_disabled.sh  |    9 +++++++++
 RHEL6/input/fixes/bash/service_cups_disabled.sh    |    9 +++++++++
 RHEL6/input/fixes/bash/service_dhcpd_disabled.sh   |    9 +++++++++
 RHEL6/input/fixes/bash/service_dovecot_disabled.sh |    9 +++++++++
 .../input/fixes/bash/service_haldaemon_disabled.sh |    9 +++++++++
 RHEL6/input/fixes/bash/service_httpd_disabled.sh   |    9 +++++++++
 RHEL6/input/fixes/bash/service_kdump_disabled.sh   |    9 +++++++++
 .../input/fixes/bash/service_mdmonitor_disabled.sh |    9 +++++++++
 .../fixes/bash/service_messagebus_disabled.sh      |    9 +++++++++
 RHEL6/input/fixes/bash/service_named_disabled.sh   |    9 +++++++++
 .../fixes/bash/service_netconsole_disabled.sh      |    9 +++++++++
 RHEL6/input/fixes/bash/service_netfs_disabled.sh   |    9 +++++++++
 RHEL6/input/fixes/bash/service_nfs_disabled.sh     |    9 +++++++++
 RHEL6/input/fixes/bash/service_nfslock_disabled.sh |    9 +++++++++
 RHEL6/input/fixes/bash/service_oddjobd_disabled.sh |    9 +++++++++
 .../fixes/bash/service_portreserve_disabled.sh     |    9 +++++++++
 RHEL6/input/fixes/bash/service_qpidd_disabled.sh   |    9 +++++++++
 .../input/fixes/bash/service_quota_nld_disabled.sh |    9 +++++++++
 RHEL6/input/fixes/bash/service_rdisc_disabled.sh   |    9 +++++++++
 RHEL6/input/fixes/bash/service_rhnsd_disabled.sh   |    9 +++++++++
 .../input/fixes/bash/service_rhsmcertd_disabled.sh |    9 +++++++++
 RHEL6/input/fixes/bash/service_rpcgssd_disabled.sh |    9 +++++++++
 .../input/fixes/bash/service_rpcidmapd_disabled.sh |    9 +++++++++
 .../fixes/bash/service_rpcsvcgssd_disabled.sh      |    9 +++++++++
 .../input/fixes/bash/service_saslauthd_disabled.sh |    9 +++++++++
 RHEL6/input/fixes/bash/service_smartd_disabled.sh  |    9 +++++++++
 RHEL6/input/fixes/bash/service_smb_disabled.sh     |    9 +++++++++
 RHEL6/input/fixes/bash/service_snmpd_disabled.sh   |    9 +++++++++
 RHEL6/input/fixes/bash/service_squid_disabled.sh   |    9 +++++++++
 RHEL6/input/fixes/bash/service_sshd_disabled.sh    |    9 +++++++++
 RHEL6/input/fixes/bash/service_sysstat_disabled.sh |    9 +++++++++
 RHEL6/input/fixes/bash/service_tftp_disabled.sh    |    9 +++++++++
 RHEL6/input/fixes/bash/service_vsftpd_disabled.sh  |    9 +++++++++
 RHEL6/input/fixes/bash/service_xinetd_disabled.sh  |    9 +++++++++
 RHEL6/input/fixes/bash/service_ypbind_disabled.sh  |    9 +++++++++
 44 files changed, 396 insertions(+), 0 deletions(-)
 create mode 100644 RHEL6/input/fixes/bash/service_abrtd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_acpid_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_atd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_autofs_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_avahi-daemon_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_bluetooth_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_certmonger_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_cgconfig_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_cgred_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_cpuspeed_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_cups_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_dhcpd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_dovecot_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_haldaemon_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_httpd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_kdump_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_mdmonitor_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_messagebus_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_named_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_netconsole_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_netfs_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_nfs_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_nfslock_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_oddjobd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_portreserve_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_qpidd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_quota_nld_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_rdisc_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_rhnsd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_rhsmcertd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_rpcgssd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_rpcidmapd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_rpcsvcgssd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_saslauthd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_smartd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_smb_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_snmpd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_squid_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_sshd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_sysstat_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_tftp_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_vsftpd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_xinetd_disabled.sh
 create mode 100644 RHEL6/input/fixes/bash/service_ypbind_disabled.sh

diff --git a/RHEL6/input/fixes/bash/service_abrtd_disabled.sh b/RHEL6/input/fixes/bash/service_abrtd_disabled.sh
new file mode 100644
index 0000000..b0b9e81
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_abrtd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable abrtd for all run levels
+#
+chkconfig --level 0123456 abrtd off
+
+#
+# Stop abrtd if currently running
+#
+service abrtd stop
diff --git a/RHEL6/input/fixes/bash/service_acpid_disabled.sh b/RHEL6/input/fixes/bash/service_acpid_disabled.sh
new file mode 100644
index 0000000..6c11659
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_acpid_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable acpid for all run levels
+#
+chkconfig --level 0123456 acpid off
+
+#
+# Stop acpid if currently running
+#
+service acpid stop
diff --git a/RHEL6/input/fixes/bash/service_atd_disabled.sh b/RHEL6/input/fixes/bash/service_atd_disabled.sh
new file mode 100644
index 0000000..5c71553
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_atd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable atd for all run levels
+#
+chkconfig --level 0123456 atd off
+
+#
+# Stop atd if currently running
+#
+service atd stop
diff --git a/RHEL6/input/fixes/bash/service_autofs_disabled.sh b/RHEL6/input/fixes/bash/service_autofs_disabled.sh
new file mode 100644
index 0000000..0c4b7f7
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_autofs_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable autofs for all run levels
+#
+chkconfig --level 0123456 autofs off
+
+#
+# Stop autofs if currently running
+#
+service autofs stop
diff --git a/RHEL6/input/fixes/bash/service_avahi-daemon_disabled.sh b/RHEL6/input/fixes/bash/service_avahi-daemon_disabled.sh
new file mode 100644
index 0000000..1255523
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_avahi-daemon_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable avahi-daemon for all run levels
+#
+chkconfig --level 0123456 avahi-daemon off
+
+#
+# Stop avahi-daemon if currently running
+#
+service avahi-daemon stop
diff --git a/RHEL6/input/fixes/bash/service_bluetooth_disabled.sh b/RHEL6/input/fixes/bash/service_bluetooth_disabled.sh
new file mode 100644
index 0000000..6b97e15
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_bluetooth_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable bluetooth for all run levels
+#
+chkconfig --level 0123456 bluetooth off
+
+#
+# Stop bluetooth if currently running
+#
+service bluetooth stop
diff --git a/RHEL6/input/fixes/bash/service_certmonger_disabled.sh b/RHEL6/input/fixes/bash/service_certmonger_disabled.sh
new file mode 100644
index 0000000..1684cc6
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_certmonger_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable certmonger for all run levels
+#
+chkconfig --level 0123456 certmonger off
+
+#
+# Stop certmonger if currently running
+#
+service certmonger stop
diff --git a/RHEL6/input/fixes/bash/service_cgconfig_disabled.sh b/RHEL6/input/fixes/bash/service_cgconfig_disabled.sh
new file mode 100644
index 0000000..539b45d
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_cgconfig_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable cgconfig for all run levels
+#
+chkconfig --level 0123456 cgconfig off
+
+#
+# Stop cgconfig if currently running
+#
+service cgconfig stop
diff --git a/RHEL6/input/fixes/bash/service_cgred_disabled.sh b/RHEL6/input/fixes/bash/service_cgred_disabled.sh
new file mode 100644
index 0000000..e4d7301
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_cgred_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable cgred for all run levels
+#
+chkconfig --level 0123456 cgred off
+
+#
+# Stop cgred if currently running
+#
+service cgred stop
diff --git a/RHEL6/input/fixes/bash/service_cpuspeed_disabled.sh b/RHEL6/input/fixes/bash/service_cpuspeed_disabled.sh
new file mode 100644
index 0000000..666d9af
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_cpuspeed_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable cpuspeed for all run levels
+#
+chkconfig --level 0123456 cpuspeed off
+
+#
+# Stop cpuspeed if currently running
+#
+service cpuspeed stop
diff --git a/RHEL6/input/fixes/bash/service_cups_disabled.sh b/RHEL6/input/fixes/bash/service_cups_disabled.sh
new file mode 100644
index 0000000..6358b9a
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_cups_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable cups for all run levels
+#
+chkconfig --level 0123456 cups off
+
+#
+# Stop cups if currently running
+#
+service cups stop
diff --git a/RHEL6/input/fixes/bash/service_dhcpd_disabled.sh b/RHEL6/input/fixes/bash/service_dhcpd_disabled.sh
new file mode 100644
index 0000000..213cb7b
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_dhcpd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable dhcpd for all run levels
+#
+chkconfig --level 0123456 dhcpd off
+
+#
+# Stop dhcpd if currently running
+#
+service dhcpd stop
diff --git a/RHEL6/input/fixes/bash/service_dovecot_disabled.sh b/RHEL6/input/fixes/bash/service_dovecot_disabled.sh
new file mode 100644
index 0000000..63fc79e
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_dovecot_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable dovecot for all run levels
+#
+chkconfig --level 0123456 dovecot off
+
+#
+# Stop dovecot if currently running
+#
+service dovecot stop
diff --git a/RHEL6/input/fixes/bash/service_haldaemon_disabled.sh b/RHEL6/input/fixes/bash/service_haldaemon_disabled.sh
new file mode 100644
index 0000000..c032a20
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_haldaemon_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable haldaemon for all run levels
+#
+chkconfig --level 0123456 haldaemon off
+
+#
+# Stop haldaemon if currently running
+#
+service haldaemon stop
diff --git a/RHEL6/input/fixes/bash/service_httpd_disabled.sh b/RHEL6/input/fixes/bash/service_httpd_disabled.sh
new file mode 100644
index 0000000..d602df0
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_httpd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable httpd for all run levels
+#
+chkconfig --level 0123456 httpd off
+
+#
+# Stop httpd if currently running
+#
+service httpd stop
diff --git a/RHEL6/input/fixes/bash/service_kdump_disabled.sh b/RHEL6/input/fixes/bash/service_kdump_disabled.sh
new file mode 100644
index 0000000..8e54ac3
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_kdump_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable kdump for all run levels
+#
+chkconfig --level 0123456 kdump off
+
+#
+# Stop kdump if currently running
+#
+service kdump stop
diff --git a/RHEL6/input/fixes/bash/service_mdmonitor_disabled.sh b/RHEL6/input/fixes/bash/service_mdmonitor_disabled.sh
new file mode 100644
index 0000000..3592662
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_mdmonitor_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable mdmonitor for all run levels
+#
+chkconfig --level 0123456 mdmonitor off
+
+#
+# Stop mdmonitor if currently running
+#
+service mdmonitor stop
diff --git a/RHEL6/input/fixes/bash/service_messagebus_disabled.sh b/RHEL6/input/fixes/bash/service_messagebus_disabled.sh
new file mode 100644
index 0000000..c166e02
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_messagebus_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable messagebus for all run levels
+#
+chkconfig --level 0123456 messagebus off
+
+#
+# Stop messagebus if currently running
+#
+service messagebus stop
diff --git a/RHEL6/input/fixes/bash/service_named_disabled.sh b/RHEL6/input/fixes/bash/service_named_disabled.sh
new file mode 100644
index 0000000..b2ec79b
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_named_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable named for all run levels
+#
+chkconfig --level 0123456 named off
+
+#
+# Stop named if currently running
+#
+service named stop
diff --git a/RHEL6/input/fixes/bash/service_netconsole_disabled.sh b/RHEL6/input/fixes/bash/service_netconsole_disabled.sh
new file mode 100644
index 0000000..37b94c5
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_netconsole_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable netconsole for all run levels
+#
+chkconfig --level 0123456 netconsole off
+
+#
+# Stop netconsole if currently running
+#
+service netconsole stop
diff --git a/RHEL6/input/fixes/bash/service_netfs_disabled.sh b/RHEL6/input/fixes/bash/service_netfs_disabled.sh
new file mode 100644
index 0000000..83cb128
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_netfs_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable netfs for all run levels
+#
+chkconfig --level 0123456 netfs off
+
+#
+# Stop netfs if currently running
+#
+service netfs stop
diff --git a/RHEL6/input/fixes/bash/service_nfs_disabled.sh b/RHEL6/input/fixes/bash/service_nfs_disabled.sh
new file mode 100644
index 0000000..eff8d42
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_nfs_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable nfs for all run levels
+#
+chkconfig --level 0123456 nfs off
+
+#
+# Stop nfs if currently running
+#
+service nfs stop
diff --git a/RHEL6/input/fixes/bash/service_nfslock_disabled.sh b/RHEL6/input/fixes/bash/service_nfslock_disabled.sh
new file mode 100644
index 0000000..d5f0994
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_nfslock_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable nfslock for all run levels
+#
+chkconfig --level 0123456 nfslock off
+
+#
+# Stop nfslock if currently running
+#
+service nfslock stop
diff --git a/RHEL6/input/fixes/bash/service_oddjobd_disabled.sh b/RHEL6/input/fixes/bash/service_oddjobd_disabled.sh
new file mode 100644
index 0000000..3b75a38
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_oddjobd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable oddjobd for all run levels
+#
+chkconfig --level 0123456 oddjobd off
+
+#
+# Stop oddjobd if currently running
+#
+service oddjobd stop
diff --git a/RHEL6/input/fixes/bash/service_portreserve_disabled.sh b/RHEL6/input/fixes/bash/service_portreserve_disabled.sh
new file mode 100644
index 0000000..5549b25
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_portreserve_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable portreserve for all run levels
+#
+chkconfig --level 0123456 portreserve off
+
+#
+# Stop portreserve if currently running
+#
+service portreserve stop
diff --git a/RHEL6/input/fixes/bash/service_qpidd_disabled.sh b/RHEL6/input/fixes/bash/service_qpidd_disabled.sh
new file mode 100644
index 0000000..4d07b5e
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_qpidd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable qpidd for all run levels
+#
+chkconfig --level 0123456 qpidd off
+
+#
+# Stop qpidd if currently running
+#
+service qpidd stop
diff --git a/RHEL6/input/fixes/bash/service_quota_nld_disabled.sh b/RHEL6/input/fixes/bash/service_quota_nld_disabled.sh
new file mode 100644
index 0000000..87ed050
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_quota_nld_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable quota_nld for all run levels
+#
+chkconfig --level 0123456 quota_nld off
+
+#
+# Stop quota_nld if currently running
+#
+service quota_nld stop
diff --git a/RHEL6/input/fixes/bash/service_rdisc_disabled.sh b/RHEL6/input/fixes/bash/service_rdisc_disabled.sh
new file mode 100644
index 0000000..898b7df
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_rdisc_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable rdisc for all run levels
+#
+chkconfig --level 0123456 rdisc off
+
+#
+# Stop rdisc if currently running
+#
+service rdisc stop
diff --git a/RHEL6/input/fixes/bash/service_rhnsd_disabled.sh b/RHEL6/input/fixes/bash/service_rhnsd_disabled.sh
new file mode 100644
index 0000000..3fc1831
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_rhnsd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable rhnsd for all run levels
+#
+chkconfig --level 0123456 rhnsd off
+
+#
+# Stop rhnsd if currently running
+#
+service rhnsd stop
diff --git a/RHEL6/input/fixes/bash/service_rhsmcertd_disabled.sh b/RHEL6/input/fixes/bash/service_rhsmcertd_disabled.sh
new file mode 100644
index 0000000..14b7295
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_rhsmcertd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable rhsmcertd for all run levels
+#
+chkconfig --level 0123456 rhsmcertd off
+
+#
+# Stop rhsmcertd if currently running
+#
+service rhsmcertd stop
diff --git a/RHEL6/input/fixes/bash/service_rpcgssd_disabled.sh b/RHEL6/input/fixes/bash/service_rpcgssd_disabled.sh
new file mode 100644
index 0000000..ae313a5
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_rpcgssd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable rpcgssd for all run levels
+#
+chkconfig --level 0123456 rpcgssd off
+
+#
+# Stop rpcgssd if currently running
+#
+service rpcgssd stop
diff --git a/RHEL6/input/fixes/bash/service_rpcidmapd_disabled.sh b/RHEL6/input/fixes/bash/service_rpcidmapd_disabled.sh
new file mode 100644
index 0000000..afcbe88
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_rpcidmapd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable rpcidmapd for all run levels
+#
+chkconfig --level 0123456 rpcidmapd off
+
+#
+# Stop rpcidmapd if currently running
+#
+service rpcidmapd stop
diff --git a/RHEL6/input/fixes/bash/service_rpcsvcgssd_disabled.sh b/RHEL6/input/fixes/bash/service_rpcsvcgssd_disabled.sh
new file mode 100644
index 0000000..397d2f6
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_rpcsvcgssd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable rpcsvcgssd for all run levels
+#
+chkconfig --level 0123456 rpcsvcgssd off
+
+#
+# Stop rpcsvcgssd if currently running
+#
+service rpcsvcgssd stop
diff --git a/RHEL6/input/fixes/bash/service_saslauthd_disabled.sh b/RHEL6/input/fixes/bash/service_saslauthd_disabled.sh
new file mode 100644
index 0000000..0e6a095
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_saslauthd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable saslauthd for all run levels
+#
+chkconfig --level 0123456 saslauthd off
+
+#
+# Stop saslauthd if currently running
+#
+service saslauthd stop
diff --git a/RHEL6/input/fixes/bash/service_smartd_disabled.sh b/RHEL6/input/fixes/bash/service_smartd_disabled.sh
new file mode 100644
index 0000000..2ab5290
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_smartd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable smartd for all run levels
+#
+chkconfig --level 0123456 smartd off
+
+#
+# Stop smartd if currently running
+#
+service smartd stop
diff --git a/RHEL6/input/fixes/bash/service_smb_disabled.sh b/RHEL6/input/fixes/bash/service_smb_disabled.sh
new file mode 100644
index 0000000..0a5e32f
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_smb_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable smb for all run levels
+#
+chkconfig --level 0123456 smb off
+
+#
+# Stop smb if currently running
+#
+service smb stop
diff --git a/RHEL6/input/fixes/bash/service_snmpd_disabled.sh b/RHEL6/input/fixes/bash/service_snmpd_disabled.sh
new file mode 100644
index 0000000..b1cd723
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_snmpd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable snmpd for all run levels
+#
+chkconfig --level 0123456 snmpd off
+
+#
+# Stop snmpd if currently running
+#
+service snmpd stop
diff --git a/RHEL6/input/fixes/bash/service_squid_disabled.sh b/RHEL6/input/fixes/bash/service_squid_disabled.sh
new file mode 100644
index 0000000..a219bbc
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_squid_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable squid for all run levels
+#
+chkconfig --level 0123456 squid off
+
+#
+# Stop squid if currently running
+#
+service squid stop
diff --git a/RHEL6/input/fixes/bash/service_sshd_disabled.sh b/RHEL6/input/fixes/bash/service_sshd_disabled.sh
new file mode 100644
index 0000000..84869e2
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_sshd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable sshd for all run levels
+#
+chkconfig --level 0123456 sshd off
+
+#
+# Stop sshd if currently running
+#
+service sshd stop
diff --git a/RHEL6/input/fixes/bash/service_sysstat_disabled.sh b/RHEL6/input/fixes/bash/service_sysstat_disabled.sh
new file mode 100644
index 0000000..a3df178
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_sysstat_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable sysstat for all run levels
+#
+chkconfig --level 0123456 sysstat off
+
+#
+# Stop sysstat if currently running
+#
+service sysstat stop
diff --git a/RHEL6/input/fixes/bash/service_tftp_disabled.sh b/RHEL6/input/fixes/bash/service_tftp_disabled.sh
new file mode 100644
index 0000000..5a0b463
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_tftp_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable tftp for all run levels
+#
+chkconfig --level 0123456 tftp off
+
+#
+# Stop tftp if currently running
+#
+service tftp stop
diff --git a/RHEL6/input/fixes/bash/service_vsftpd_disabled.sh b/RHEL6/input/fixes/bash/service_vsftpd_disabled.sh
new file mode 100644
index 0000000..a372995
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_vsftpd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable vsftpd for all run levels
+#
+chkconfig --level 0123456 vsftpd off
+
+#
+# Stop vsftpd if currently running
+#
+service vsftpd stop
diff --git a/RHEL6/input/fixes/bash/service_xinetd_disabled.sh b/RHEL6/input/fixes/bash/service_xinetd_disabled.sh
new file mode 100644
index 0000000..0c57a40
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_xinetd_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable xinetd for all run levels
+#
+chkconfig --level 0123456 xinetd off
+
+#
+# Stop xinetd if currently running
+#
+service xinetd stop
diff --git a/RHEL6/input/fixes/bash/service_ypbind_disabled.sh b/RHEL6/input/fixes/bash/service_ypbind_disabled.sh
new file mode 100644
index 0000000..18048fb
--- /dev/null
+++ b/RHEL6/input/fixes/bash/service_ypbind_disabled.sh
@@ -0,0 +1,9 @@
+#
+# Disable ypbind for all run levels
+#
+chkconfig --level 0123456 ypbind off
+
+#
+# Stop ypbind if currently running
+#
+service ypbind stop
-- 
1.7.1



More information about the scap-security-guide mailing list