[PATCH 0/2] added XCCDF and OVAL for kernel.dmesg_restrict

David Smith dsmith at eclipse.ncsc.mil
Tue Sep 3 20:00:02 UTC 2013


This patch set introduces a new rule for restricting access to dmesg, and 
template-created OVAL for checking the sysctl value.  The OVAL was tested:

[dave at rhel6 checks] sysctl kernel.dmesg_restrict ; ./testcheck.py sysctl_kernel_dmesg_restrict.xml
kernel.dmesg_restrict = 1
Evaluating with OVAL tempfile : /tmp/sysctl_kernel_dmesg_restrictH4fcfB.xml
Writing results to : /tmp/sysctl_kernel_dmesg_restrictH4fcfB.xml-results
Definition oval:scap-security-guide.testing:def:100: true
Evaluation done.


David Smith (2):
  new rule for restricting access to dmesg
  new OVAL check for kernel.dmesg_restrict

 .../input/checks/sysctl_kernel_dmesg_restrict.xml  |   28 ++++++++++++++++++++
 RHEL6/input/checks/templates/sysctl_values.csv     |    1 +
 RHEL6/input/system/permissions/execution.xml       |   12 ++++++++
 3 files changed, 41 insertions(+), 0 deletions(-)
 create mode 100644 RHEL6/input/checks/sysctl_kernel_dmesg_restrict.xml



More information about the scap-security-guide mailing list