[PATCH] [Fedora] Include directory structure to support remediations. [Fedora] Add text file pattern remediation script generator. [Fedora] Add remediation for "Set password minimum length in login.defs" rule

Jan Lieskovsky jlieskov at redhat.com
Mon Nov 18 17:17:48 UTC 2013


1) This proposal includes the necessary directory structure /
transform scripts, so remediation scripts could work for Fedora
content too,

2) Since there (in RHEL6 content) are currently multiple remediation
   fixes of the form "search for text file pattern. Replace old value
   based on provided variable if found or append new value if not found":
   - accounts_maximum_age_login_defs.sh
   - accounts_minimum_age_login_defs.sh
   ..
   - accounts_umask_login_defs.sh
   ..
   - sshd_set_idle_timeout.sh (16 of this type in total right now),
   wrote 'replace or append pattern value in text file' remediation
   script generator (create_replace_or_append_pattern_value_in_text_file.sh),
   which can be used, when new remediation scripts of this type are needed.

3) Based on that script created remediation script for
   "Set password minimum length in login.defs" rule.

Please review.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fedora-Include-directory-structure-to-support-remedi.patch
Type: text/x-patch
Size: 14764 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131118/23d8ba2e/attachment-0001.bin>


More information about the scap-security-guide mailing list