[PATCH 3/7] changed Dovecot Rule to Group as it is guidance and not a compliance check

Jeffrey Blank blank at eclipse.ncsc.mil
Thu May 16 03:51:36 UTC 2013


Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
 RHEL6/input/services/imap.xml |    9 ++-------
 1 files changed, 2 insertions(+), 7 deletions(-)

diff --git a/RHEL6/input/services/imap.xml b/RHEL6/input/services/imap.xml
index 9731443..7ef54fe 100644
--- a/RHEL6/input/services/imap.xml
+++ b/RHEL6/input/services/imap.xml
@@ -54,7 +54,7 @@ POP3 server, the dovecot software should be configured securely by following
 the recommendations below.
 </description>
 
-<Rule id="dovecot_support_necessary_protocols">
+<Group id="dovecot_support_necessary_protocols">
 <title>Support Only the Necessary Protocols</title>
 <description>Dovecot supports the IMAP and POP3 protocols, as well as 
 SSL-protected versions of those protocols. Configure the Dovecot server 
@@ -74,12 +74,7 @@ client to use the STARTTLS command before authenticating.
 Configuring Dovecot to only support the protocols the protocols needed by
 your site reduces the risk of an attacker using one of the unused protocols
 to base an attack.</rationale>
-<ident cce="27097-5" />
-<ident cce="26933-2" />
-<ident cce="27135-3" />
-<ident cce="27140-3" />
-<!-- <oval id="dovecot_support_necessary_protocols" /> -->
-</Rule>
+</Group>
 
 <Group id="dovecot_enabling_ssl">
 <title>Enable SSL Support</title>
-- 
1.7.1



More information about the scap-security-guide mailing list