[PATCH] cleanup of comments, unnecessary Rules in DNS (bind) service

Shawn Wells shawn at redhat.com
Tue May 14 03:09:16 UTC 2013


On 5/13/13 9:01 PM, Jeffrey Blank wrote:
>   
> -<Rule id="dns_server_chroot">
> +<Group id="dns_server_chroot">
>   <title>Run DNS Software in a chroot Jail</title>
>   <description>Install the <tt>bind-chroot</tt> package:
>   <pre># yum install bind-chroot</pre>
> @@ -97,31 +94,10 @@ configuration file. That is, when this guide recommends editing
>   <tt>/etc/named.conf</tt>, you should instead edit
>   <tt>/var/named/chroot/etc/named.conf</tt>.
>   </warning>
> -<ident cce="26957-1" />
> -<ident cce="27127-0" />
> -<ident cce="26961-3" />
> -<!--<oval id="dns_server_chroot" />-->
> -<ref nist="CM-7" />
> -</Rule>
Since this gives specific guidance, wouldn't we want this as a <rule>?


More information about the scap-security-guide mailing list