[PATCH 1/2] Adding ability to check for absolute file paths for X, as seen in some other published security guidance

Maura Dailey maura at eclipse.ncsc.mil
Tue May 14 00:05:38 UTC 2013


On 05/13/2013 07:42 PM, Jeffrey Blank wrote:
> NACK.  This check is not references by the XCCDF.  The right course of 
> action is instead to delete this check.
>
> Please run "make validate" if you are looking for OVAL that should 
> probably be deleted.
>

I won't push it out, then, but is the overall goal to write prose to 
cover existing unused checks or is it to remove checks that aren't 
referenced? There was at least one other check that wasn't referenced 
that seemed to be broken the last time I checked. I had assumed checks 
that weren't referenced were missing prose, not the other way around, 
since I'd assumed a lot of the prose came from older guidance.

> On Mon, May 13, 2013 at 2:20 PM, Maura Dailey <maura at eclipse.ncsc.mil 
> <mailto:maura at eclipse.ncsc.mil>> wrote:
>
>
>     Signed-off-by: Maura Dailey <maura at eclipse.ncsc.mil
>     <mailto:maura at eclipse.ncsc.mil>>
>     ---
>      RHEL6/input/checks/xwindows_remote_listening.xml |    2 +-
>      1 files changed, 1 insertions(+), 1 deletions(-)
>
>     diff --git a/RHEL6/input/checks/xwindows_remote_listening.xml
>     b/RHEL6/input/checks/xwindows_remote_listening.xml
>     index 0d5e5c9..cb4ef3d 100644
>     --- a/RHEL6/input/checks/xwindows_remote_listening.xml
>     +++ b/RHEL6/input/checks/xwindows_remote_listening.xml
>     @@ -24,7 +24,7 @@
>        version="1">
>          <ind:path>/etc/X11/xinit</ind:path>
>          <ind:filename>xserverrc</ind:filename>
>     -    <ind:pattern operation="pattern
>     match">^[\s]*exec\sX\s:0\s\-nolisten\stcp\s\$@</ind:pattern>
>     +    <ind:pattern operation="pattern match">^\s*exec\s*[
>     /\\\.\w]*X\s*:0\s*\-nolisten\s*tcp\s*["]?\$@["]?$</ind:pattern>
>          <ind:instance datatype="int">1</ind:instance>
>        </ind:textfilecontent54_object>
>      </def-group>
>     --
>     1.7.1
>
>     _______________________________________________
>     scap-security-guide mailing list
>     scap-security-guide at lists.fedorahosted.org
>     <mailto:scap-security-guide at lists.fedorahosted.org>
>     https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>
>
>
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130513/beebcd02/attachment.html>


More information about the scap-security-guide mailing list