[PATCH 21/21] Updated service_tftpd_disabled
Shawn Wells
shawn.d.wells at gmail.com
Mon May 13 03:12:26 UTC 2013
-------------- next part --------------
>From de705e93da802262053a2ae4b96913aac4ecd9b1 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Sun, 12 May 2013 23:08:46 -0400
Subject: [PATCH 21/21] Updated service_tftpd_disabled
As reflected from update to template file
---
RHEL6/input/checks/service_tftp_disabled.xml | 109 +++++++++++++++++++++-----
1 files changed, 90 insertions(+), 19 deletions(-)
diff --git a/RHEL6/input/checks/service_tftp_disabled.xml b/RHEL6/input/checks/service_tftp_disabled.xml
index 711a781..73f7b5b 100644
--- a/RHEL6/input/checks/service_tftp_disabled.xml
+++ b/RHEL6/input/checks/service_tftp_disabled.xml
@@ -1,28 +1,99 @@
<def-group>
- <definition class="compliance"
- id="service_tftpd_disabled" version="1">
+ <!-- THIS FILE IS GENERATED by create_services_disabled.py. DO NOT EDIT. -->
+ <definition class="compliance" id="service_tftp_disabled"
+ version="1">
<metadata>
- <title>Disable tftp Service</title>
+ <title>Service tftp Disabled</title>
<affected family="unix">
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
- <description>Disable tftp Service</description>
+ <description>The tftp service should be disabled if possible.</description>
</metadata>
- <criteria operator="AND">
- <criterion comment="Disable tftp Service" test_ref="test_disable_tftp_service" />
+ <criteria comment="package tftp-server removed or service tftp is not configured to start" operator="OR">
+ <extend_definition comment="tftp-server removed" definition_ref="package_tftp-server_removed" />
+ <criteria operator="AND" comment="service tftp is not configured to start">
+ <criterion comment="tftp runlevel 0" test_ref="test_runlevel0_tftp" />
+ <criterion comment="tftp runlevel 1" test_ref="test_runlevel1_tftp" />
+ <criterion comment="tftp runlevel 2" test_ref="test_runlevel2_tftp" />
+ <criterion comment="tftp runlevel 3" test_ref="test_runlevel3_tftp" />
+ <criterion comment="tftp runlevel 4" test_ref="test_runlevel4_tftp" />
+ <criterion comment="tftp runlevel 5" test_ref="test_runlevel5_tftp" />
+ <criterion comment="tftp runlevel 6" test_ref="test_runlevel6_tftp" />
+ </criteria>
</criteria>
</definition>
-
- <ind:textfilecontent54_test check="all"
- check_existence="all_exist" comment="Disable Telnet Service"
- id="test_disable_tftp_service" version="1">
- <ind:object object_ref="obj_disable_tftp_service" />
- </ind:textfilecontent54_test>
- <ind:textfilecontent54_object comment="Disable Telnet Service"
- id="obj_disable_tftp_service" version="1">
- <ind:path>/etc/xinetd.d</ind:path>
- <ind:filename>tftp</ind:filename>
- <ind:pattern operation="pattern match">disable\s=\syes</ind:pattern>
- <ind:instance datatype="int">1</ind:instance>
- </ind:textfilecontent54_object>
+ <unix:runlevel_test check="all" check_existence="any_exist"
+ comment="Runlevel test" id="test_runlevel0_tftp"
+ version="2">
+ <unix:object object_ref="obj_runlevel0_tftp" />
+ <unix:state state_ref="state_service_tftp_off" />
+ </unix:runlevel_test>
+ <unix:runlevel_test check="all" check_existence="any_exist"
+ comment="Runlevel test" id="test_runlevel1_tftp"
+ version="2">
+ <unix:object object_ref="obj_runlevel1_tftp" />
+ <unix:state state_ref="state_service_tftp_off" />
+ </unix:runlevel_test>
+ <unix:runlevel_test check="all" check_existence="any_exist"
+ comment="Runlevel test" id="test_runlevel2_tftp"
+ version="2">
+ <unix:object object_ref="obj_runlevel2_tftp" />
+ <unix:state state_ref="state_service_tftp_off" />
+ </unix:runlevel_test>
+ <unix:runlevel_test check="all" check_existence="any_exist"
+ comment="Runlevel test" id="test_runlevel3_tftp"
+ version="2">
+ <unix:object object_ref="obj_runlevel3_tftp" />
+ <unix:state state_ref="state_service_tftp_off" />
+ </unix:runlevel_test>
+ <unix:runlevel_test check="all" check_existence="any_exist"
+ comment="Runlevel test" id="test_runlevel4_tftp"
+ version="2">
+ <unix:object object_ref="obj_runlevel4_tftp" />
+ <unix:state state_ref="state_service_tftp_off" />
+ </unix:runlevel_test>
+ <unix:runlevel_test check="all" check_existence="any_exist"
+ comment="Runlevel test" id="test_runlevel5_tftp"
+ version="2">
+ <unix:object object_ref="obj_runlevel5_tftp" />
+ <unix:state state_ref="state_service_tftp_off" />
+ </unix:runlevel_test>
+ <unix:runlevel_test check="all" check_existence="any_exist"
+ comment="Runlevel test" id="test_runlevel6_tftp"
+ version="2">
+ <unix:object object_ref="obj_runlevel6_tftp" />
+ <unix:state state_ref="state_service_tftp_off" />
+ </unix:runlevel_test>
+ <unix:runlevel_object id="obj_runlevel0_tftp" version="1">
+ <unix:service_name>tftp</unix:service_name>
+ <unix:runlevel operation="equals">0</unix:runlevel>
+ </unix:runlevel_object>
+ <unix:runlevel_object id="obj_runlevel1_tftp" version="1">
+ <unix:service_name>tftp</unix:service_name>
+ <unix:runlevel operation="equals">1</unix:runlevel>
+ </unix:runlevel_object>
+ <unix:runlevel_object id="obj_runlevel2_tftp" version="1">
+ <unix:service_name>tftp</unix:service_name>
+ <unix:runlevel operation="equals">2</unix:runlevel>
+ </unix:runlevel_object>
+ <unix:runlevel_object id="obj_runlevel3_tftp" version="1">
+ <unix:service_name>tftp</unix:service_name>
+ <unix:runlevel operation="equals">3</unix:runlevel>
+ </unix:runlevel_object>
+ <unix:runlevel_object id="obj_runlevel4_tftp" version="1">
+ <unix:service_name>tftp</unix:service_name>
+ <unix:runlevel operation="equals">4</unix:runlevel>
+ </unix:runlevel_object>
+ <unix:runlevel_object id="obj_runlevel5_tftp" version="1">
+ <unix:service_name>tftp</unix:service_name>
+ <unix:runlevel operation="equals">5</unix:runlevel>
+ </unix:runlevel_object>
+ <unix:runlevel_object id="obj_runlevel6_tftp" version="1">
+ <unix:service_name>tftp</unix:service_name>
+ <unix:runlevel operation="equals">6</unix:runlevel>
+ </unix:runlevel_object>
+ <unix:runlevel_state comment="not configured to start" id="state_service_tftp_off" version="1">
+ <unix:start datatype="boolean">false</unix:start>
+ <unix:kill datatype="boolean">true</unix:kill>
+ </unix:runlevel_state>
</def-group>
--
1.7.1
More information about the scap-security-guide
mailing list