[PATCH] [Fedora] Introduce 'Ensure SELinux Not Disabled in Currently Running Kernel' rule

Jan Lieskovsky jlieskov at redhat.com
Thu Oct 10 15:46:18 UTC 2013


For now we have decided to postpone submission
of this proposal till the doubt if SCAP security
guide should check just system configuration,
or also the system runtime settings too, is solved
(and focused on work on other sections of the guide).

We can propose new version, that in the default run would
check just system configuration settings, and mark runtime
checks as 'notapplicable' in the default version (to be
set up / enabled by actual Fedora SCAP content users
in case of desire / requirement).

But would be good to know your general opinion on the
topic (if SSG should check just configuration, or also
runtime settings) to avoid this when submitting proposals
for new rules in the future.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team

----- Original Message -----
> From: "Jan Lieskovsky" <jlieskov at redhat.com>
> To: scap-security-guide at lists.fedorahosted.org
> Sent: Friday, October 4, 2013 7:11:09 PM
> Subject: [PATCH] [Fedora] Introduce 'Ensure SELinux Not Disabled in Currently Running Kernel' rule
> 
> 
> Introduce new SELinux section of the guide and first rule
> for it - check if SELinux is enabled in currently
> booted kernel.
> 
> Please review.
> 
> Thank you && Regards, Jan.
> --
> Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fedora-Introduce-Ensure-SELinux-Not-Disabled-in-Curr.patch
Type: text/x-patch
Size: 8495 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131010/846e5cf2/attachment.bin>


More information about the scap-security-guide mailing list