[PATCH 3/3] added macro to address services managed by xinetd

Shawn Wells shawn at redhat.com
Sat Oct 26 18:08:23 UTC 2013


On 10/26/13, 1:17 PM, David Smith wrote:
> ---
>   RHEL6/transforms/shorthand2xccdf.xslt |   12 ++++++++++++
>   1 files changed, 12 insertions(+), 0 deletions(-)
>
> diff --git a/RHEL6/transforms/shorthand2xccdf.xslt b/RHEL6/transforms/shorthand2xccdf.xslt
> index 84a68ed..1008492 100644
> --- a/RHEL6/transforms/shorthand2xccdf.xslt
> +++ b/RHEL6/transforms/shorthand2xccdf.xslt
> @@ -205,6 +205,7 @@
>               <xsl:if test="fileperms-check-macro or fileowner-check-macro or filegroupowner-check-macro">it does not</xsl:if>
>               <xsl:if test="partition-check-macro">no line is returned</xsl:if>
>               <xsl:if test="service-disable-check-macro">the service is running</xsl:if>
> +            <xsl:if test="xinetd-service-disable-check-macro">the service is running</xsl:if>
>               <xsl:if test="service-enable-check-macro">the service is not running</xsl:if>
>               <xsl:if test="package-check-macro">the package is installed</xsl:if>
>               <xsl:if test="module-disable-check-macro">no line is returned</xsl:if>
> @@ -406,6 +407,17 @@
>       <xhtml:pre><xsl:value-of select="@service"/> is stopped</xhtml:pre>
>     </xsl:template>
>   
> +  <xsl:template match="xinetd-service-disable-check-macro">
> +      To check that the <xhtml:code><xsl:value-of select="@service"/></xhtml:code> service is disabled in system boot configuration, run the following command:
> +          <xhtml:pre># chkconfig <xhtml:code><xsl:value-of select="@service"/></xhtml:code> --list</xhtml:pre>
> +              Output should indicate the <xhtml:code><xsl:value-of select="@service"/></xhtml:code> service has either not been installed, or has been disabled, as shown in the example below:
> +              <xhtml:pre># chkconfig <xhtml:code><xsl:value-of select="@service"/></xhtml:code> --list
> +<xhtml:code><xsl:value-of select="@service"/></xhtml:code>       off</xhtml:pre>
> +  </xsl:template>
> +
> +
> +
> +
>     <xsl:template match="service-enable-check-macro">
>       Run the following command to determine the current status of the
>   <xhtml:code><xsl:value-of select="@service"/></xhtml:code> service:
> -- 1.7.1

applied locally -- this is nice work!

ack
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131026/2b5acbd1/attachment.html>


More information about the scap-security-guide mailing list