[PATCH 2/2] more OVAL testing

Shawn Wells shawn at redhat.com
Fri Oct 11 14:31:02 UTC 2013


On 10/11/13 10:19 AM, David Smith wrote:
> ---
>   .../input/checks/iptables_default_policy_drop.xml  |    1 +
>   RHEL6/input/checks/service_ip6tables_enabled.xml   |    1 +
>   2 files changed, 2 insertions(+), 0 deletions(-)
>
> diff --git a/RHEL6/input/checks/iptables_default_policy_drop.xml b/RHEL6/input/checks/iptables_default_policy_drop.xml
> index d6099e8..46edf9b 100644
> --- a/RHEL6/input/checks/iptables_default_policy_drop.xml
> +++ b/RHEL6/input/checks/iptables_default_policy_drop.xml
> @@ -9,6 +9,7 @@
>         </affected>
>         <description>Change the default policy to DROP (from ACCEPT)
>         for the INPUT built-in chain.</description>
> +      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
>       </metadata>
>       <criteria>
>         <criterion comment=":INPUT DROP [0:0]"
> diff --git a/RHEL6/input/checks/service_ip6tables_enabled.xml b/RHEL6/input/checks/service_ip6tables_enabled.xml
> index b2c750e..f0bbe99 100644
> --- a/RHEL6/input/checks/service_ip6tables_enabled.xml
> +++ b/RHEL6/input/checks/service_ip6tables_enabled.xml
> @@ -8,6 +8,7 @@
>           <platform>Red Hat Enterprise Linux 6</platform>
>         </affected>
>         <description>The ip6tables service should be enabled if possible.</description>
> +      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
>       </metadata>
>       <criteria comment="package iptables-ipv6 installed and service ip6tables is configured to start" operator="AND">
>       <extend_definition comment="iptables-ipv6 installed" definition_ref="package_iptables-ipv6_installed" />
ack


More information about the scap-security-guide mailing list