XCCDF: using value references in rule description
Rui Pedro Bernardino
rui-p-bernardino at ptinovacao.pt
Thu Sep 26 10:35:49 UTC 2013
Hi,
Is there any reason why SSG doesn't use the profile values on the description, eg:
(...)
<description>The SELinux state should be set to <tt><sub idref="var_selinux_state_name"/></tt> at
(...)
Instead of the current:
(...)
<description>The SELinux state should be set to <tt>enforcing</tt> at
(...)
With the current approach, the rule description (possibly) won't match the profile and will mention misleading remediations.
Regards
--
Rui Pedro Bernardino
CTE2/Tecnologias e Desenvolvimento
PT Inovação
More information about the scap-security-guide
mailing list