[PATCH 2/4] Added sysctl remediation scripts

Shawn Wells shawn at redhat.com
Sat Jun 1 23:34:02 UTC 2013


On 6/1/13 7:14 PM, Jeffrey Blank wrote:
> Actually, maybe this is fine this.  It will only add lines if there is 
> a failure, so this shouldn't be cluttering up sysctl.conf needlessly. 
>  My only concern is that if the default is fine, and was unchanged, 
> let's not add anything to sysctl.conf.

I was worried about that too! The scripts only get generated upon OVAL 
failure, so unless the defaults were found to be lacking it shouldn't be 
an issue.


More information about the scap-security-guide mailing list