[PATCH 0/2] added XCCDF and OVAL for kernel.dmesg_restrict

Shawn Wells shawn at redhat.com
Tue Sep 3 20:06:31 UTC 2013


On 9/3/13 4:00 PM, David Smith wrote:
> This patch set introduces a new rule for restricting access to dmesg, and
> template-created OVAL for checking the sysctl value.  The OVAL was tested:
>
> [dave at rhel6 checks] sysctl kernel.dmesg_restrict ; ./testcheck.py sysctl_kernel_dmesg_restrict.xml
> kernel.dmesg_restrict = 1
> Evaluating with OVAL tempfile : /tmp/sysctl_kernel_dmesg_restrictH4fcfB.xml
> Writing results to : /tmp/sysctl_kernel_dmesg_restrictH4fcfB.xml-results
> Definition oval:scap-security-guide.testing:def:100: true
> Evaluation done.
>
>
> David Smith (2):
>    new rule for restricting access to dmesg
>    new OVAL check for kernel.dmesg_restrict
>
>   .../input/checks/sysctl_kernel_dmesg_restrict.xml  |   28 ++++++++++++++++++++
>   RHEL6/input/checks/templates/sysctl_values.csv     |    1 +
>   RHEL6/input/system/permissions/execution.xml       |   12 ++++++++
>   3 files changed, 41 insertions(+), 0 deletions(-)
>   create mode 100644 RHEL6/input/checks/sysctl_kernel_dmesg_restrict.xml

Ack to the set. Thanks for adding the OVAL!



More information about the scap-security-guide mailing list