[PATCH] cleanup of comments, unnecessary Rules in DNS (bind) service
Shawn Wells
shawn at redhat.com
Tue May 14 03:09:16 UTC 2013
On 5/13/13 9:01 PM, Jeffrey Blank wrote:
>
> -<Rule id="dns_server_chroot">
> +<Group id="dns_server_chroot">
> <title>Run DNS Software in a chroot Jail</title>
> <description>Install the <tt>bind-chroot</tt> package:
> <pre># yum install bind-chroot</pre>
> @@ -97,31 +94,10 @@ configuration file. That is, when this guide recommends editing
> <tt>/etc/named.conf</tt>, you should instead edit
> <tt>/var/named/chroot/etc/named.conf</tt>.
> </warning>
> -<ident cce="26957-1" />
> -<ident cce="27127-0" />
> -<ident cce="26961-3" />
> -<!--<oval id="dns_server_chroot" />-->
> -<ref nist="CM-7" />
> -</Rule>
Since this gives specific guidance, wouldn't we want this as a <rule>?
More information about the scap-security-guide
mailing list