[PATCH 0/6] getting make-validate closer to OK

Jeffrey Blank blank at eclipse.ncsc.mil
Mon May 20 05:50:55 UTC 2013


This is largely about deleting vestigial OVAL checks.

Some of the remaining "OVAL Check is not referenced by XCCDF" messages which
"make validate" produces call for more investigation.

And of course the OVAL schematron still has problems.  But this gets us
closer.


Jeffrey Blank (6):
  removal of packages from check templates
  removal or correction of misnamed or obsolete OVAL checks
  removal of comments, reference to nonexistent OVAL
  refine verify-references to deal only with OVAL compliance checks for
    OVAL
  removal of references to nonexistent OVAL for some NFS guidance
  corrections for typos in OVAL references

 .../accounts_no_nis_inclusions_etc_passwd.xml      |   23 ------
 .../input/checks/audit_rules_dac_modification.xml  |   40 -----------
 RHEL6/input/checks/cups_limit_web_interface.xml    |   30 --------
 RHEL6/input/checks/file_mode_etc_crontab.xml       |   33 ---------
 RHEL6/input/checks/file_ownership_etc_skel.xml     |   39 -----------
 .../file_permissions_boot_grub_grub_conf.xml       |   46 -------------
 RHEL6/input/checks/file_user_owner_etc_crontab.xml |   25 -------
 RHEL6/input/checks/mount_option_nodev_on_tmp.xml   |   30 --------
 .../input/checks/package_ipsec-tools_installed.xml |   25 -------
 RHEL6/input/checks/package_talk-server_removed.xml |   25 -------
 RHEL6/input/checks/package_talk_removed.xml        |   25 -------
 RHEL6/input/checks/service_abrtd_disabled.xml      |    3 +
 RHEL6/input/checks/sysconfig_ipv6_disable.xml      |   37 ----------
 RHEL6/input/checks/sysconfig_ipv6_networking.xml   |   37 ----------
 .../checks/sysconfig_networking_ipv6_ifcfg.xml     |   37 ----------
 ...tl_net_ipv6_conf_default_accept_ra_rtr_pref.xml |   31 ---------
 RHEL6/input/checks/templates/Makefile              |    4 +-
 .../input/checks/templates/packages_installed.csv  |    5 --
 RHEL6/input/checks/templates/packages_removed.csv  |    3 -
 RHEL6/input/checks/templates/services_disabled.csv |    2 +-
 RHEL6/input/checks/xwindows_remote_listening.xml   |   30 --------
 RHEL6/input/services/http.xml                      |   72 --------------------
 RHEL6/input/services/nfs.xml                       |    4 -
 RHEL6/input/services/obsolete.xml                  |    2 +-
 RHEL6/input/system/permissions/partitions.xml      |    2 +-
 RHEL6/utils/verify-references.py                   |    5 +-
 26 files changed, 11 insertions(+), 604 deletions(-)
 delete mode 100644 RHEL6/input/checks/accounts_no_nis_inclusions_etc_passwd.xml
 delete mode 100644 RHEL6/input/checks/audit_rules_dac_modification.xml
 delete mode 100644 RHEL6/input/checks/cups_limit_web_interface.xml
 delete mode 100644 RHEL6/input/checks/file_mode_etc_crontab.xml
 delete mode 100644 RHEL6/input/checks/file_ownership_etc_skel.xml
 delete mode 100644 RHEL6/input/checks/file_permissions_boot_grub_grub_conf.xml
 delete mode 100644 RHEL6/input/checks/file_user_owner_etc_crontab.xml
 delete mode 100644 RHEL6/input/checks/mount_option_nodev_on_tmp.xml
 delete mode 100644 RHEL6/input/checks/package_ipsec-tools_installed.xml
 delete mode 100644 RHEL6/input/checks/package_talk-server_removed.xml
 delete mode 100644 RHEL6/input/checks/package_talk_removed.xml
 delete mode 100644 RHEL6/input/checks/sysconfig_ipv6_disable.xml
 delete mode 100644 RHEL6/input/checks/sysconfig_ipv6_networking.xml
 delete mode 100644 RHEL6/input/checks/sysconfig_networking_ipv6_ifcfg.xml
 delete mode 100644 RHEL6/input/checks/sysctl_net_ipv6_conf_default_accept_ra_rtr_pref.xml
 delete mode 100644 RHEL6/input/checks/xwindows_remote_listening.xml



More information about the scap-security-guide mailing list