[PATCH 4/4] Created service_*_disabled remediation scripts

Vincent Passaro vince.passaro at fotisnetworks.com
Sat Jun 1 21:48:51 UTC 2013


I'm confused. So remediation content into Scap? Not what was discussed on the Aqueduct call yesterday?


Sent from my Verizon Wireless 4G LTE Smartphone



-------- Original message --------
From: Shawn Wells <shawn at redhat.com>
Date: 06/01/2013 2:22 PM (GMT-08:00)
To: scap-security-guide at lists.fedorahosted.org
Subject: Re: [PATCH 4/4] Created service_*_disabled remediation scripts


On 6/1/13 5:20 PM, Shawn Wells wrote:


>From d43b1d02d295afdbf954af076668843845ae4325 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com><mailto:shawn at redhat.com>
Date: Sat, 1 Jun 2013 17:11:16 -0400
Subject: [PATCH 4/4] Created service_*_disabled remediation scripts
 - Generated from template

Just to ensure things showup properly during script gen:
oscap xccdf eval --profile stig-rhel6-server --cpe ssg-rhel6-cpe-dictionary.xml --results /var/www/html/results/results.xml --report /var/www/html/report.html ssg-rhel6-xccdf.xml; oscap xccdf generate fix --result-id xccdf_org.open-scap_testresult_stig-rhel6-server /var/www/html/results/results.xml
....

chkconfig --level 0123456 autofs off

service autofs stop

.....

comments get stripped from my email2list script... here's the full output of script generation:


#!/bin/bash
# OpenSCAP fix generator output for benchmark: Guide to the Secure Configuration of Red Hat Enterprise Linux 6


# Generating fixes for all failed rules in test result 'xccdf_org.open-scap_testresult_stig-rhel6-server'.

# XCCDF rule: service_autofs_disabled
# CCE-26976-1

#
# Disable autofs for all run levels
#
chkconfig --level 0123456 autofs off

#
# Stop autofs if currently running
#
service autofs stop


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130601/09adc22d/attachment.html>


More information about the scap-security-guide mailing list