[PATCH 0/2] cleanup of Postfix section
Shawn Wells
shawn at redhat.com
Wed May 8 03:20:28 UTC 2013
On 5/7/13 9:24 AM, Jeffrey Blank wrote:
> The excellent Postfix documentation on postfix.org
> now covers much of what was originally written in 2005.
>
> This re-write points to the security-relevant portions
> of that documentation. It is incomplete, but a large
> step forward.
>
> This also involves deleting OVAL checks that were not
> particularly informative or had seriously granularity
> issues. If there is a desire to query Postfix settings,
> OVAL can be re-written.
>
> Jeffrey Blank (2):
> simplification of Postfix service configuration
> deleting files for imprecise and obsolete OVAL checks, manual
> remediation
>
> RHEL6/input/checks/iptables_smtp_enabled.xml | 51 ---
> RHEL6/input/checks/postfix_certificate_files.xml | 242 -------------
> .../checks/postfix_server_denial_of_service.xml | 140 -------
> ...tfix_server_mail_relay_for_trusted_networks.xml | 28 --
> ...server_mail_relay_require_tls_for_smtp_auth.xml | 117 ------
> ...tfix_server_mail_relay_set_trusted_networks.xml | 64 ----
> RHEL6/input/profiles/manual_remediation.xml | 31 --
> RHEL6/input/services/mail.xml | 382 ++++++++------------
> 8 files changed, 142 insertions(+), 913 deletions(-)
> delete mode 100644 RHEL6/input/checks/iptables_smtp_enabled.xml
> delete mode 100644 RHEL6/input/checks/postfix_certificate_files.xml
> delete mode 100644 RHEL6/input/checks/postfix_server_denial_of_service.xml
> delete mode 100644 RHEL6/input/checks/postfix_server_mail_relay_for_trusted_networks.xml
> delete mode 100644 RHEL6/input/checks/postfix_server_mail_relay_require_tls_for_smtp_auth.xml
> delete mode 100644 RHEL6/input/checks/postfix_server_mail_relay_set_trusted_networks.xml
> delete mode 100644 RHEL6/input/profiles/manual_remediation.xml
Ack
More information about the scap-security-guide
mailing list