[PATCH 1/3] OVAL signoff

David Smith dsmith at eclipse.ncsc.mil
Sat Oct 26 17:30:08 UTC 2013


---
 .../checks/kernel_module_ipv6_option_disabled.xml  |    1 -
 RHEL6/input/checks/ldap_client_start_tls.xml       |    1 -
 RHEL6/input/checks/service_rexec_disabled.xml      |    1 -
 RHEL6/input/checks/service_rlogin_disabled.xml     |    1 -
 RHEL6/input/checks/service_rsh_disabled.xml        |    1 -
 RHEL6/input/checks/service_telnetd_disabled.xml    |    1 -
 RHEL6/input/checks/service_xinetd_disabled.xml     |    1 -
 7 files changed, 0 insertions(+), 7 deletions(-)

diff --git a/RHEL6/input/checks/kernel_module_ipv6_option_disabled.xml b/RHEL6/input/checks/kernel_module_ipv6_option_disabled.xml
index cb61e74..a1203bf 100644
--- a/RHEL6/input/checks/kernel_module_ipv6_option_disabled.xml
+++ b/RHEL6/input/checks/kernel_module_ipv6_option_disabled.xml
@@ -6,7 +6,6 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The disable option will allow the IPv6 module to be inserted, but prevent address assignment and activation of the network stack.</description>
-      <reference source="DS" ref_id="20131018" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion test_ref="test_kernel_module_ipv6_option_disabled" comment="ipv6 disabled any modprobe conf file"/>
diff --git a/RHEL6/input/checks/ldap_client_start_tls.xml b/RHEL6/input/checks/ldap_client_start_tls.xml
index 184b9c2..75f636d 100644
--- a/RHEL6/input/checks/ldap_client_start_tls.xml
+++ b/RHEL6/input/checks/ldap_client_start_tls.xml
@@ -7,7 +7,6 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>Require the use of TLS for ldap clients.</description>
-      <reference source="DS" ref_id="20131018" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package pam_ldap is not present" operator="OR">
       <extend_definition comment="pam_ldap not present or not in use" 
diff --git a/RHEL6/input/checks/service_rexec_disabled.xml b/RHEL6/input/checks/service_rexec_disabled.xml
index 205b567..9e1ee78 100644
--- a/RHEL6/input/checks/service_rexec_disabled.xml
+++ b/RHEL6/input/checks/service_rexec_disabled.xml
@@ -6,7 +6,6 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The rexec service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20131018" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package rsh-server removed or service rexec is not configured to start" operator="OR">
       <extend_definition comment="rpm package rsh-server removed" definition_ref="package_rsh-server_removed" />
diff --git a/RHEL6/input/checks/service_rlogin_disabled.xml b/RHEL6/input/checks/service_rlogin_disabled.xml
index ed95c27..6318c9a 100644
--- a/RHEL6/input/checks/service_rlogin_disabled.xml
+++ b/RHEL6/input/checks/service_rlogin_disabled.xml
@@ -6,7 +6,6 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The rlogin service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20131018" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package rsh-server removed or service rlogin is not configured to start" operator="OR">
       <extend_definition comment="rpm package rsh-server removed" definition_ref="package_rsh-server_removed" />
diff --git a/RHEL6/input/checks/service_rsh_disabled.xml b/RHEL6/input/checks/service_rsh_disabled.xml
index 54e9136..71bc9ff 100644
--- a/RHEL6/input/checks/service_rsh_disabled.xml
+++ b/RHEL6/input/checks/service_rsh_disabled.xml
@@ -6,7 +6,6 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The rsh service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20131018" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package rsh-server removed or service rsh is not configured to start" operator="OR">
       <extend_definition comment="rpm package rsh-server removed" definition_ref="package_rsh-server_removed" />
diff --git a/RHEL6/input/checks/service_telnetd_disabled.xml b/RHEL6/input/checks/service_telnetd_disabled.xml
index 095f7ad..b02fe67 100644
--- a/RHEL6/input/checks/service_telnetd_disabled.xml
+++ b/RHEL6/input/checks/service_telnetd_disabled.xml
@@ -7,7 +7,6 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>Disable telnet Service</description>
-      <reference source="DS" ref_id="20131018" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package telnet-server removed or service telnetd is not configured to start" operator="OR">
       <extend_definition comment="rpm package telnet-server removed" definition_ref="package_telnet-server_removed" />
diff --git a/RHEL6/input/checks/service_xinetd_disabled.xml b/RHEL6/input/checks/service_xinetd_disabled.xml
index c162e23..24ad0ef 100644
--- a/RHEL6/input/checks/service_xinetd_disabled.xml
+++ b/RHEL6/input/checks/service_xinetd_disabled.xml
@@ -8,7 +8,6 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The xinetd service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20131018" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package xinetd removed or service xinetd is not configured to start" operator="OR">
     <extend_definition comment="xinetd removed" definition_ref="package_xinetd_removed" />
-- 
1.7.1



More information about the scap-security-guide mailing list