[PATCH 2/4] Added sysctl remediation scripts
Shawn Wells
shawn at redhat.com
Sat Jun 1 23:34:02 UTC 2013
On 6/1/13 7:14 PM, Jeffrey Blank wrote:
> Actually, maybe this is fine this. It will only add lines if there is
> a failure, so this shouldn't be cluttering up sysctl.conf needlessly.
> My only concern is that if the default is fine, and was unchanged,
> let's not add anything to sysctl.conf.
I was worried about that too! The scripts only get generated upon OVAL
failure, so unless the defaults were found to be lacking it shouldn't be
an issue.
More information about the scap-security-guide
mailing list