[PATCH 3/3] added macro to address services managed by xinetd
Shawn Wells
shawn at redhat.com
Sat Oct 26 18:08:23 UTC 2013
On 10/26/13, 1:17 PM, David Smith wrote:
> ---
> RHEL6/transforms/shorthand2xccdf.xslt | 12 ++++++++++++
> 1 files changed, 12 insertions(+), 0 deletions(-)
>
> diff --git a/RHEL6/transforms/shorthand2xccdf.xslt b/RHEL6/transforms/shorthand2xccdf.xslt
> index 84a68ed..1008492 100644
> --- a/RHEL6/transforms/shorthand2xccdf.xslt
> +++ b/RHEL6/transforms/shorthand2xccdf.xslt
> @@ -205,6 +205,7 @@
> <xsl:if test="fileperms-check-macro or fileowner-check-macro or filegroupowner-check-macro">it does not</xsl:if>
> <xsl:if test="partition-check-macro">no line is returned</xsl:if>
> <xsl:if test="service-disable-check-macro">the service is running</xsl:if>
> + <xsl:if test="xinetd-service-disable-check-macro">the service is running</xsl:if>
> <xsl:if test="service-enable-check-macro">the service is not running</xsl:if>
> <xsl:if test="package-check-macro">the package is installed</xsl:if>
> <xsl:if test="module-disable-check-macro">no line is returned</xsl:if>
> @@ -406,6 +407,17 @@
> <xhtml:pre><xsl:value-of select="@service"/> is stopped</xhtml:pre>
> </xsl:template>
>
> + <xsl:template match="xinetd-service-disable-check-macro">
> + To check that the <xhtml:code><xsl:value-of select="@service"/></xhtml:code> service is disabled in system boot configuration, run the following command:
> + <xhtml:pre># chkconfig <xhtml:code><xsl:value-of select="@service"/></xhtml:code> --list</xhtml:pre>
> + Output should indicate the <xhtml:code><xsl:value-of select="@service"/></xhtml:code> service has either not been installed, or has been disabled, as shown in the example below:
> + <xhtml:pre># chkconfig <xhtml:code><xsl:value-of select="@service"/></xhtml:code> --list
> +<xhtml:code><xsl:value-of select="@service"/></xhtml:code> off</xhtml:pre>
> + </xsl:template>
> +
> +
> +
> +
> <xsl:template match="service-enable-check-macro">
> Run the following command to determine the current status of the
> <xhtml:code><xsl:value-of select="@service"/></xhtml:code> service:
> -- 1.7.1
applied locally -- this is nice work!
ack
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131026/2b5acbd1/attachment.html>
More information about the scap-security-guide
mailing list