[PATCH 0/2] cleanup of Postfix section

Shawn Wells shawn at redhat.com
Wed May 8 03:20:28 UTC 2013


On 5/7/13 9:24 AM, Jeffrey Blank wrote:
> The excellent Postfix documentation on postfix.org
> now covers much of what was originally written in 2005.
>
> This re-write points to the security-relevant portions
> of that documentation.  It is incomplete, but a large
> step forward.
>
> This also involves deleting OVAL checks that were not
> particularly informative or had seriously granularity
> issues.  If there is a desire to query Postfix settings,
> OVAL can be re-written.
>
> Jeffrey Blank (2):
>    simplification of Postfix service configuration
>    deleting files for imprecise and obsolete OVAL checks, manual
>      remediation
>
>   RHEL6/input/checks/iptables_smtp_enabled.xml       |   51 ---
>   RHEL6/input/checks/postfix_certificate_files.xml   |  242 -------------
>   .../checks/postfix_server_denial_of_service.xml    |  140 -------
>   ...tfix_server_mail_relay_for_trusted_networks.xml |   28 --
>   ...server_mail_relay_require_tls_for_smtp_auth.xml |  117 ------
>   ...tfix_server_mail_relay_set_trusted_networks.xml |   64 ----
>   RHEL6/input/profiles/manual_remediation.xml        |   31 --
>   RHEL6/input/services/mail.xml                      |  382 ++++++++------------
>   8 files changed, 142 insertions(+), 913 deletions(-)
>   delete mode 100644 RHEL6/input/checks/iptables_smtp_enabled.xml
>   delete mode 100644 RHEL6/input/checks/postfix_certificate_files.xml
>   delete mode 100644 RHEL6/input/checks/postfix_server_denial_of_service.xml
>   delete mode 100644 RHEL6/input/checks/postfix_server_mail_relay_for_trusted_networks.xml
>   delete mode 100644 RHEL6/input/checks/postfix_server_mail_relay_require_tls_for_smtp_auth.xml
>   delete mode 100644 RHEL6/input/checks/postfix_server_mail_relay_set_trusted_networks.xml
>   delete mode 100644 RHEL6/input/profiles/manual_remediation.xml
Ack


More information about the scap-security-guide mailing list