XCCDF: using value references in rule description

Rui Pedro Bernardino rui-p-bernardino at ptinovacao.pt
Thu Sep 26 10:35:49 UTC 2013


Hi,

Is there any reason why SSG doesn't use the profile values on the description, eg:

(...)
<description>The SELinux state should be set to <tt><sub idref="var_selinux_state_name"/></tt> at
(...)

Instead of the current:
(...)
<description>The SELinux state should be set to <tt>enforcing</tt> at
(...)

With the current approach, the rule description (possibly) won't match the profile and will mention misleading remediations.


Regards

--
Rui Pedro Bernardino
CTE2/Tecnologias e Desenvolvimento
PT Inovação




More information about the scap-security-guide mailing list