[PATCH] Additional OVAL testing
Shawn Wells
shawn at redhat.com
Thu Oct 3 03:29:38 UTC 2013
On 10/2/13 11:21 PM, Shawn Wells wrote:
> ..... submitting to mailing list for a private citizen, working on SSG
> on their own time.... who doesn't currently have access to their work
> EMail...
>
>> From ea29e29516e253fce13bef596fa0de219157a82a Mon Sep 17 00:00:00 2001
>> From: root <root at localhost.localdomain>
>> Date: Wed, 2 Oct 2013 20:46:06 -0400
>> Subject: [PATCH] OVAL testing
>>
>> ---
>> RHEL6/input/checks/service_auditd_enabled.xml | 1 +
>> RHEL6/input/checks/service_bluetooth_disabled.xml | 1 +
>> RHEL6/input/checks/service_netconsole_disabled.xml | 1 +
>> RHEL6/input/checks/service_rhnsd_disabled.xml | 1 +
>> RHEL6/input/checks/service_rsyslog_enabled.xml | 1 +
>> 5 files changed, 5 insertions(+), 0 deletions(-)
>>
>> diff --git a/RHEL6/input/checks/service_auditd_enabled.xml
>> b/RHEL6/input/checks/service_auditd_enabled.xml
>> index 382fca3..7124b8f 100644
>> --- a/RHEL6/input/checks/service_auditd_enabled.xml
>> +++ b/RHEL6/input/checks/service_auditd_enabled.xml
>> @@ -8,6 +8,7 @@
>> <platform>Red Hat Enterprise Linux 6</platform>
>> </affected>
>> <description>The auditd service should be enabled if
>> possible.</description>
>> + <reference source="DS" ref_id="20131002"
>> ref_url="test_attestation" />
>> </metadata>
>> <criteria comment="package audit installed and service auditd is
>> configured to start" operator="AND">
>> <extend_definition comment="audit installed"
>> definition_ref="package_audit_installed" />
>> diff --git a/RHEL6/input/checks/service_bluetooth_disabled.xml
>> b/RHEL6/input/checks/service_bluetooth_disabled.xml
>> index c3bda7c..89818f9 100644
>> --- a/RHEL6/input/checks/service_bluetooth_disabled.xml
>> +++ b/RHEL6/input/checks/service_bluetooth_disabled.xml
>> @@ -8,6 +8,7 @@
>> <platform>Red Hat Enterprise Linux 6</platform>
>> </affected>
>> <description>The bluetooth service should be disabled if
>> possible.</description>
>> + <reference source="DS" ref_id="20131002"
>> ref_url="test_attestation" />
>> </metadata>
>> <criteria operator="AND" comment="service bluetooth is not
>> configured to start">
>> <criterion comment="bluetooth runlevel 0"
>> test_ref="test_runlevel0_bluetooth" />
>> diff --git a/RHEL6/input/checks/service_netconsole_disabled.xml
>> b/RHEL6/input/checks/service_netconsole_disabled.xml
>> index cdcc544..143d496 100644
>> --- a/RHEL6/input/checks/service_netconsole_disabled.xml
>> +++ b/RHEL6/input/checks/service_netconsole_disabled.xml
>> @@ -8,6 +8,7 @@
>> <platform>Red Hat Enterprise Linux 6</platform>
>> </affected>
>> <description>The netconsole service should be disabled if
>> possible.</description>
>> + <reference source="DS" ref_id="20131002"
>> ref_url="test_attestation" />
>> </metadata>
>> <criteria operator="AND" comment="service netconsole is not
>> configured to start">
>> <criterion comment="netconsole runlevel 0"
>> test_ref="test_runlevel0_netconsole" />
>> diff --git a/RHEL6/input/checks/service_rhnsd_disabled.xml
>> b/RHEL6/input/checks/service_rhnsd_disabled.xml
>> index ff0779f..316426b 100644
>> --- a/RHEL6/input/checks/service_rhnsd_disabled.xml
>> +++ b/RHEL6/input/checks/service_rhnsd_disabled.xml
>> @@ -8,6 +8,7 @@
>> <platform>Red Hat Enterprise Linux 6</platform>
>> </affected>
>> <description>The rhnsd service should be disabled if
>> possible.</description>
>> + <reference source="DS" ref_id="20131002"
>> ref_url="test_attestation" />
>> </metadata>
>> <criteria comment="package rhnsd removed or service rhnsd is not
>> configured to start" operator="OR">
>> <extend_definition comment="rhnsd removed"
>> definition_ref="package_rhnsd_removed" />
>> diff --git a/RHEL6/input/checks/service_rsyslog_enabled.xml
>> b/RHEL6/input/checks/service_rsyslog_enabled.xml
>> index 05bf4c7..fad53a2 100644
>> --- a/RHEL6/input/checks/service_rsyslog_enabled.xml
>> +++ b/RHEL6/input/checks/service_rsyslog_enabled.xml
>> @@ -8,6 +8,7 @@
>> <platform>Red Hat Enterprise Linux 6</platform>
>> </affected>
>> <description>The rsyslog service should be enabled if
>> possible.</description>
>> + <reference source="DS" ref_id="20131002"
>> ref_url="test_attestation" />
>> </metadata>
>> <criteria comment="package rsyslog installed and service rsyslog
>> is configured to start" operator="AND">
>> <extend_definition comment="rsyslog installed"
>> definition_ref="package_rsyslog_installed" />
>> --
>> 1.7.1
ack & pushing
More information about the scap-security-guide
mailing list