Few more false positives from the RPM content

Shawn Wells shawn at redhat.com
Mon Sep 16 03:36:18 UTC 2013


On 9/14/13 7:18 PM, Leam Hall wrote:
> Shawn,
>
> STIG GEN IDs for RHEL 6.
>
> Leam
>
>
> On 09/14/2013 06:36 PM, Shawn Wells wrote:
>> On 9/13/13 4:39 PM, Leam Hall wrote:
>>> 50, 
fixed

>>> 73, 

known issue now tracked @ 
https://fedorahosted.org/scap-security-guide/ticket/415

works for the simple USGCB banner, but not DoD.


>>> 206
[root at SSG-RHEL6 checks]# rpm -qav telnet-server
[root at SSG-RHEL6 checks]# ./testcheck.py package_telnet-server_removed.xml
Evaluating with OVAL tempfile : /tmp/package_telnet-server_removedgNcY8J.xml
Writing results to : /tmp/package_telnet-server_removedgNcY8J.xml-results
Definition oval:scap-security-guide.testing:def:257: true
Evaluation done.


[root at SSG-RHEL6 checks]# yum install telnet-server ; ./testcheck.py 
package_telnet-server_removed.xml
...
Installed:
   telnet-server.x86_64 1:0.17-47.el6_3.1

Dependency Installed:
   xinetd.x86_64 2:2.3.14-38.el6

Complete!
Evaluating with OVAL tempfile : /tmp/package_telnet-server_removedI2ajJh.xml
Writing results to : /tmp/package_telnet-server_removedI2ajJh.xml-results
Definition oval:scap-security-guide.testing:def:257: false
Evaluation done.


Seems working with latest git pull on 15sept



>>> , 211

known issue wrt the xinet checks. Thanks for reporting though!


>>>
>>> I don't mind getting around to helping with these but have a few other
>>> things on my plate at the moment.
>> Thanks for reporting! Are these STIG IDs, or CCIs?
>> _______________________________________________ 


-- 
Shawn Wells
Director, Innovation Programs
shawn at redhat.com | 443.534.0130
@shawndwells



More information about the scap-security-guide mailing list