[PATCH 3/3] OVAL signoff for multiple sysctl_net_ipv4 checks

David Smith dsmith at eclipse.ncsc.mil
Fri Sep 20 20:26:29 UTC 2013


Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
 .../sysctl_net_ipv4_conf_all_accept_redirects.xml  |    1 +
 ...ysctl_net_ipv4_conf_all_accept_source_route.xml |    1 +
 .../sysctl_net_ipv4_conf_all_log_martians.xml      |    1 +
 .../sysctl_net_ipv4_conf_all_secure_redirects.xml  |    1 +
 .../sysctl_net_ipv4_conf_all_send_redirects.xml    |    1 +
 ...l_net_ipv4_conf_default_accept_source_route.xml |    1 +
 ...sysctl_net_ipv4_conf_default_send_redirects.xml |    1 +
 RHEL6/input/checks/sysctl_net_ipv4_ip_forward.xml  |    1 +
 8 files changed, 8 insertions(+), 0 deletions(-)

diff --git a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_redirects.xml b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_redirects.xml
index a975c3f..c013d27 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_redirects.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_redirects.xml
@@ -7,6 +7,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The kernel runtime parameter "net.ipv4.conf.all.accept_redirects" should be set to "0".</description>
+      <reference source="DS" ref_id="20130920" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion comment="kernel runtime parameter net.ipv4.conf.all.accept_redirects set to 0" test_ref="test_sysctl_net_ipv4_conf_all_accept_redirects" />
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_source_route.xml b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_source_route.xml
index 6c88e98..e3e163b 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_source_route.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_source_route.xml
@@ -7,6 +7,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The kernel runtime parameter "net.ipv4.conf.all.accept_source_route" should be set to "0".</description>
+      <reference source="DS" ref_id="20130920" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion comment="kernel runtime parameter net.ipv4.conf.all.accept_source_route set to 0" test_ref="test_sysctl_net_ipv4_conf_all_accept_source_route" />
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_log_martians.xml b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_log_martians.xml
index 460d1d6..e11092f 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_log_martians.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_log_martians.xml
@@ -7,6 +7,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The kernel runtime parameter "net.ipv4.conf.all.log_martians" should be set to "1".</description>
+      <reference source="DS" ref_id="20130920" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion comment="kernel runtime parameter net.ipv4.conf.all.log_martians set to 1" test_ref="test_sysctl_net_ipv4_conf_all_log_martians" />
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_secure_redirects.xml b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_secure_redirects.xml
index a9ff005..251cb42 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_secure_redirects.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_secure_redirects.xml
@@ -7,6 +7,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The kernel runtime parameter "net.ipv4.conf.all.secure_redirects" should be set to "0".</description>
+      <reference source="DS" ref_id="20130920" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion comment="kernel runtime parameter net.ipv4.conf.all.secure_redirects set to 0" test_ref="test_sysctl_net_ipv4_conf_all_secure_redirects" />
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_send_redirects.xml b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_send_redirects.xml
index 7a21347..55ce654 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_send_redirects.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_send_redirects.xml
@@ -7,6 +7,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The kernel runtime parameter "net.ipv4.conf.all.send_redirects" should be set to "0".</description>
+      <reference source="DS" ref_id="20130920" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion comment="kernel runtime parameter net.ipv4.conf.all.send_redirects set to 0" test_ref="test_sysctl_net_ipv4_conf_all_send_redirects" />
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_conf_default_accept_source_route.xml b/RHEL6/input/checks/sysctl_net_ipv4_conf_default_accept_source_route.xml
index 3f54b26..28c6602 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_default_accept_source_route.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_default_accept_source_route.xml
@@ -7,6 +7,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The kernel runtime parameter "net.ipv4.conf.default.accept_source_route" should be set to "0".</description>
+      <reference source="DS" ref_id="20130920" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion comment="kernel runtime parameter net.ipv4.conf.default.accept_source_route set to 0" test_ref="test_sysctl_net_ipv4_conf_default_accept_source_route" />
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_conf_default_send_redirects.xml b/RHEL6/input/checks/sysctl_net_ipv4_conf_default_send_redirects.xml
index c2db75b..261d26a 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_default_send_redirects.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_default_send_redirects.xml
@@ -7,6 +7,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The kernel runtime parameter "net.ipv4.conf.default.send_redirects" should be set to "0".</description>
+      <reference source="DS" ref_id="20130919" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion comment="kernel runtime parameter net.ipv4.conf.default.send_redirects set to 0" test_ref="test_sysctl_net_ipv4_conf_default_send_redirects" />
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_ip_forward.xml b/RHEL6/input/checks/sysctl_net_ipv4_ip_forward.xml
index 96f0948..2203ade 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_ip_forward.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_ip_forward.xml
@@ -7,6 +7,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The kernel runtime parameter "net.ipv4.ip_forward" should be set to "0".</description>
+      <reference source="DS" ref_id="20130919" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion comment="kernel runtime parameter net.ipv4.ip_forward set to 0" test_ref="test_sysctl_net_ipv4_ip_forward" />
-- 
1.7.1



More information about the scap-security-guide mailing list