Current false positve list

leam hall leamhall at gmail.com
Thu Sep 12 18:51:00 UTC 2013


Using the oscap from openscap 0.9.3-1 and the ssg content fresh from the
repo (0.1-12) I ran:

oscap xccdf eval --profile stig-rhel6-server --results
`hostname`-ssg-results.xml --report `hostname`-ssg-results.html --cpe
/usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml
/usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml

on my server. The output gave me stuff to work on and what seems to be a
list of false positives. I have not found these items in the STIG. Could
someone point me to them, or can we remove them from the scan if they are
not present?

I'm looking at the git repo but having issues with builds. So some of these
might already be fixed.

Thanks!

Leam

#####

Configure auditd admin_space_left Action on Low Disk Space
Disable IPv6 Networking Support Automatic Loading
Disable Kernel Parameter for Accepting ICMP Redirects By Default
Disable Kernel Parameter for Accepting Secure Redirects By Default
Disable Kernel Parameter for Accepting Secure Redirects for All Interfaces

Disable Kernel Parameter for Sending ICMP Redirects by Default
Disable Modprobe Loading of USB Storage Driver
Ensure All Files Are Owned by a Group
Ensure All Files Are Owned by a User
Ensure auditd Collects Unauthorized Access Attempts to Files (unsuccessful)
Ensure SELinux State is Enforcing
Implement Blank Screen Saver
Record Events that Modify User/Group Information
Set SSH Client Alive Count

-- 
Mind on a Mission <http://leamhall.blogspot.com/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130912/b38b25c0/attachment.html>


More information about the scap-security-guide mailing list