[PATCH 0/2] added XCCDF and OVAL for kernel.dmesg_restrict
David Smith
dsmith at eclipse.ncsc.mil
Tue Sep 3 20:00:02 UTC 2013
This patch set introduces a new rule for restricting access to dmesg, and
template-created OVAL for checking the sysctl value. The OVAL was tested:
[dave at rhel6 checks] sysctl kernel.dmesg_restrict ; ./testcheck.py sysctl_kernel_dmesg_restrict.xml
kernel.dmesg_restrict = 1
Evaluating with OVAL tempfile : /tmp/sysctl_kernel_dmesg_restrictH4fcfB.xml
Writing results to : /tmp/sysctl_kernel_dmesg_restrictH4fcfB.xml-results
Definition oval:scap-security-guide.testing:def:100: true
Evaluation done.
David Smith (2):
new rule for restricting access to dmesg
new OVAL check for kernel.dmesg_restrict
.../input/checks/sysctl_kernel_dmesg_restrict.xml | 28 ++++++++++++++++++++
RHEL6/input/checks/templates/sysctl_values.csv | 1 +
RHEL6/input/system/permissions/execution.xml | 12 ++++++++
3 files changed, 41 insertions(+), 0 deletions(-)
create mode 100644 RHEL6/input/checks/sysctl_kernel_dmesg_restrict.xml
More information about the scap-security-guide
mailing list