[PATCH 0/6] getting make-validate closer to OK
Maura Dailey
maura at eclipse.ncsc.mil
Mon May 20 23:46:42 UTC 2013
On 05/20/2013 01:50 AM, Jeffrey Blank wrote:
> This is largely about deleting vestigial OVAL checks.
>
> Some of the remaining "OVAL Check is not referenced by XCCDF" messages which
> "make validate" produces call for more investigation.
>
> And of course the OVAL schematron still has problems. But this gets us
> closer.
>
>
> Jeffrey Blank (6):
> removal of packages from check templates
> removal or correction of misnamed or obsolete OVAL checks
> removal of comments, reference to nonexistent OVAL
> refine verify-references to deal only with OVAL compliance checks for
> OVAL
> removal of references to nonexistent OVAL for some NFS guidance
> corrections for typos in OVAL references
>
> .../accounts_no_nis_inclusions_etc_passwd.xml | 23 ------
> .../input/checks/audit_rules_dac_modification.xml | 40 -----------
> RHEL6/input/checks/cups_limit_web_interface.xml | 30 --------
> RHEL6/input/checks/file_mode_etc_crontab.xml | 33 ---------
> RHEL6/input/checks/file_ownership_etc_skel.xml | 39 -----------
> .../file_permissions_boot_grub_grub_conf.xml | 46 -------------
> RHEL6/input/checks/file_user_owner_etc_crontab.xml | 25 -------
> RHEL6/input/checks/mount_option_nodev_on_tmp.xml | 30 --------
> .../input/checks/package_ipsec-tools_installed.xml | 25 -------
> RHEL6/input/checks/package_talk-server_removed.xml | 25 -------
> RHEL6/input/checks/package_talk_removed.xml | 25 -------
> RHEL6/input/checks/service_abrtd_disabled.xml | 3 +
> RHEL6/input/checks/sysconfig_ipv6_disable.xml | 37 ----------
> RHEL6/input/checks/sysconfig_ipv6_networking.xml | 37 ----------
> .../checks/sysconfig_networking_ipv6_ifcfg.xml | 37 ----------
> ...tl_net_ipv6_conf_default_accept_ra_rtr_pref.xml | 31 ---------
> RHEL6/input/checks/templates/Makefile | 4 +-
> .../input/checks/templates/packages_installed.csv | 5 --
> RHEL6/input/checks/templates/packages_removed.csv | 3 -
> RHEL6/input/checks/templates/services_disabled.csv | 2 +-
> RHEL6/input/checks/xwindows_remote_listening.xml | 30 --------
> RHEL6/input/services/http.xml | 72 --------------------
> RHEL6/input/services/nfs.xml | 4 -
> RHEL6/input/services/obsolete.xml | 2 +-
> RHEL6/input/system/permissions/partitions.xml | 2 +-
> RHEL6/utils/verify-references.py | 5 +-
> 26 files changed, 11 insertions(+), 604 deletions(-)
> delete mode 100644 RHEL6/input/checks/accounts_no_nis_inclusions_etc_passwd.xml
> delete mode 100644 RHEL6/input/checks/audit_rules_dac_modification.xml
> delete mode 100644 RHEL6/input/checks/cups_limit_web_interface.xml
> delete mode 100644 RHEL6/input/checks/file_mode_etc_crontab.xml
> delete mode 100644 RHEL6/input/checks/file_ownership_etc_skel.xml
> delete mode 100644 RHEL6/input/checks/file_permissions_boot_grub_grub_conf.xml
> delete mode 100644 RHEL6/input/checks/file_user_owner_etc_crontab.xml
> delete mode 100644 RHEL6/input/checks/mount_option_nodev_on_tmp.xml
> delete mode 100644 RHEL6/input/checks/package_ipsec-tools_installed.xml
> delete mode 100644 RHEL6/input/checks/package_talk-server_removed.xml
> delete mode 100644 RHEL6/input/checks/package_talk_removed.xml
> delete mode 100644 RHEL6/input/checks/sysconfig_ipv6_disable.xml
> delete mode 100644 RHEL6/input/checks/sysconfig_ipv6_networking.xml
> delete mode 100644 RHEL6/input/checks/sysconfig_networking_ipv6_ifcfg.xml
> delete mode 100644 RHEL6/input/checks/sysctl_net_ipv6_conf_default_accept_ra_rtr_pref.xml
> delete mode 100644 RHEL6/input/checks/xwindows_remote_listening.xml
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
ACK to all!
More information about the scap-security-guide
mailing list