[PATCH 3/7] changed Dovecot Rule to Group as it is guidance and not a compliance check
Jeffrey Blank
blank at eclipse.ncsc.mil
Thu May 16 03:51:36 UTC 2013
Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
RHEL6/input/services/imap.xml | 9 ++-------
1 files changed, 2 insertions(+), 7 deletions(-)
diff --git a/RHEL6/input/services/imap.xml b/RHEL6/input/services/imap.xml
index 9731443..7ef54fe 100644
--- a/RHEL6/input/services/imap.xml
+++ b/RHEL6/input/services/imap.xml
@@ -54,7 +54,7 @@ POP3 server, the dovecot software should be configured securely by following
the recommendations below.
</description>
-<Rule id="dovecot_support_necessary_protocols">
+<Group id="dovecot_support_necessary_protocols">
<title>Support Only the Necessary Protocols</title>
<description>Dovecot supports the IMAP and POP3 protocols, as well as
SSL-protected versions of those protocols. Configure the Dovecot server
@@ -74,12 +74,7 @@ client to use the STARTTLS command before authenticating.
Configuring Dovecot to only support the protocols the protocols needed by
your site reduces the risk of an attacker using one of the unused protocols
to base an attack.</rationale>
-<ident cce="27097-5" />
-<ident cce="26933-2" />
-<ident cce="27135-3" />
-<ident cce="27140-3" />
-<!-- <oval id="dovecot_support_necessary_protocols" /> -->
-</Rule>
+</Group>
<Group id="dovecot_enabling_ssl">
<title>Enable SSL Support</title>
--
1.7.1
More information about the scap-security-guide
mailing list