[PATCH 0/3] STIG bugfixes

Maura Dailey maura at eclipse.ncsc.mil
Tue Sep 3 16:05:08 UTC 2013


That's correct, grub.conf is not template-able since the location can 
not be accurately predicted without gathering further information about 
the system. EFI works differently and requires its own partition, so the 
file location of grub.conf is different on EFI machines. Thanks for 
catching that, Jeff.

- Maura Dailey

On 09/02/2013 11:03 PM, Jeffrey Blank wrote:
> Yes.  Though I might guess that Maura may have a comment about the
> grub.conf checks, since I think she recently had some fights with it?
> It may not be template-able if we are checking for two different file
> locations.
>
> Also, I believe there is a "filepath" element in an OVAL file test;
> this will permit some reduction of the line count by combining the
> previously-separate filename and filepath elements.
>
> On Sun, Sep 1, 2013 at 3:24 PM, Dave Smith <davsmith.work at gmail.com> wrote:
>> These look great, as far as I can see. Please push!
>>
>> On Sep 1, 2013 10:17 AM, "Shawn Wells" <shawn.d.wells at gmail.com> wrote:
>>>
>>>
>>> _______________________________________________
>>> scap-security-guide mailing list
>>> scap-security-guide at lists.fedorahosted.org
>>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>>>
>> _______________________________________________
>> scap-security-guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide



More information about the scap-security-guide mailing list