[PATCH 4/4] Created service_*_disabled remediation scripts

Shawn Wells shawn at redhat.com
Sat Jun 1 21:22:42 UTC 2013


On 6/1/13 5:20 PM, Shawn Wells wrote:
>
>  From d43b1d02d295afdbf954af076668843845ae4325 Mon Sep 17 00:00:00 2001
> From: Shawn Wells<shawn at redhat.com>
> Date: Sat, 1 Jun 2013 17:11:16 -0400
> Subject: [PATCH 4/4] Created service_*_disabled remediation scripts
>   - Generated from template
>
> Just to ensure things showup properly during script gen:
> oscap xccdf eval --profile stig-rhel6-server --cpe ssg-rhel6-cpe-dictionary.xml --results /var/www/html/results/results.xml --report /var/www/html/report.html ssg-rhel6-xccdf.xml; oscap xccdf generate fix --result-id xccdf_org.open-scap_testresult_stig-rhel6-server /var/www/html/results/results.xml
> ....
>
> chkconfig --level 0123456 autofs off
>
> service autofs stop
>
> .....

comments get stripped from my email2list script... here's the full 
output of script generation:


#!/bin/bash
# OpenSCAP fix generator output for benchmark: Guide to the Secure 
Configuration of Red Hat Enterprise Linux 6


# Generating fixes for all failed rules in test result 
'xccdf_org.open-scap_testresult_stig-rhel6-server'.

# XCCDF rule: service_autofs_disabled
# CCE-26976-1

#
# Disable autofs for all run levels
#
chkconfig --level 0123456 autofs off

#
# Stop autofs if currently running
#
service autofs stop


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130601/52d0ef6c/attachment.html>


More information about the scap-security-guide mailing list