[PATCH 0/6] getting make-validate closer to OK

Maura Dailey maura at eclipse.ncsc.mil
Mon May 20 23:46:42 UTC 2013


On 05/20/2013 01:50 AM, Jeffrey Blank wrote:
> This is largely about deleting vestigial OVAL checks.
>
> Some of the remaining "OVAL Check is not referenced by XCCDF" messages which
> "make validate" produces call for more investigation.
>
> And of course the OVAL schematron still has problems.  But this gets us
> closer.
>
>
> Jeffrey Blank (6):
>    removal of packages from check templates
>    removal or correction of misnamed or obsolete OVAL checks
>    removal of comments, reference to nonexistent OVAL
>    refine verify-references to deal only with OVAL compliance checks for
>      OVAL
>    removal of references to nonexistent OVAL for some NFS guidance
>    corrections for typos in OVAL references
>
>   .../accounts_no_nis_inclusions_etc_passwd.xml      |   23 ------
>   .../input/checks/audit_rules_dac_modification.xml  |   40 -----------
>   RHEL6/input/checks/cups_limit_web_interface.xml    |   30 --------
>   RHEL6/input/checks/file_mode_etc_crontab.xml       |   33 ---------
>   RHEL6/input/checks/file_ownership_etc_skel.xml     |   39 -----------
>   .../file_permissions_boot_grub_grub_conf.xml       |   46 -------------
>   RHEL6/input/checks/file_user_owner_etc_crontab.xml |   25 -------
>   RHEL6/input/checks/mount_option_nodev_on_tmp.xml   |   30 --------
>   .../input/checks/package_ipsec-tools_installed.xml |   25 -------
>   RHEL6/input/checks/package_talk-server_removed.xml |   25 -------
>   RHEL6/input/checks/package_talk_removed.xml        |   25 -------
>   RHEL6/input/checks/service_abrtd_disabled.xml      |    3 +
>   RHEL6/input/checks/sysconfig_ipv6_disable.xml      |   37 ----------
>   RHEL6/input/checks/sysconfig_ipv6_networking.xml   |   37 ----------
>   .../checks/sysconfig_networking_ipv6_ifcfg.xml     |   37 ----------
>   ...tl_net_ipv6_conf_default_accept_ra_rtr_pref.xml |   31 ---------
>   RHEL6/input/checks/templates/Makefile              |    4 +-
>   .../input/checks/templates/packages_installed.csv  |    5 --
>   RHEL6/input/checks/templates/packages_removed.csv  |    3 -
>   RHEL6/input/checks/templates/services_disabled.csv |    2 +-
>   RHEL6/input/checks/xwindows_remote_listening.xml   |   30 --------
>   RHEL6/input/services/http.xml                      |   72 --------------------
>   RHEL6/input/services/nfs.xml                       |    4 -
>   RHEL6/input/services/obsolete.xml                  |    2 +-
>   RHEL6/input/system/permissions/partitions.xml      |    2 +-
>   RHEL6/utils/verify-references.py                   |    5 +-
>   26 files changed, 11 insertions(+), 604 deletions(-)
>   delete mode 100644 RHEL6/input/checks/accounts_no_nis_inclusions_etc_passwd.xml
>   delete mode 100644 RHEL6/input/checks/audit_rules_dac_modification.xml
>   delete mode 100644 RHEL6/input/checks/cups_limit_web_interface.xml
>   delete mode 100644 RHEL6/input/checks/file_mode_etc_crontab.xml
>   delete mode 100644 RHEL6/input/checks/file_ownership_etc_skel.xml
>   delete mode 100644 RHEL6/input/checks/file_permissions_boot_grub_grub_conf.xml
>   delete mode 100644 RHEL6/input/checks/file_user_owner_etc_crontab.xml
>   delete mode 100644 RHEL6/input/checks/mount_option_nodev_on_tmp.xml
>   delete mode 100644 RHEL6/input/checks/package_ipsec-tools_installed.xml
>   delete mode 100644 RHEL6/input/checks/package_talk-server_removed.xml
>   delete mode 100644 RHEL6/input/checks/package_talk_removed.xml
>   delete mode 100644 RHEL6/input/checks/sysconfig_ipv6_disable.xml
>   delete mode 100644 RHEL6/input/checks/sysconfig_ipv6_networking.xml
>   delete mode 100644 RHEL6/input/checks/sysconfig_networking_ipv6_ifcfg.xml
>   delete mode 100644 RHEL6/input/checks/sysctl_net_ipv6_conf_default_accept_ra_rtr_pref.xml
>   delete mode 100644 RHEL6/input/checks/xwindows_remote_listening.xml
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

ACK to all!


More information about the scap-security-guide mailing list