[PATCH] OVAL signoff on service_rhnsd_disabled.xml

Shawn Wells shawn at redhat.com
Fri Sep 27 21:41:35 UTC 2013


On 9/27/13 5:38 PM, Tony James wrote:
>
> 0001-OVAL-signoff-on-service_rhnsd_disabled.xml.patch
>
>
>  From 7c449cf51e09694274e596b5d46c790000cabaf7 Mon Sep 17 00:00:00 2001
> From: Tony James<tony at redhat.com>
> Date: Fri, 27 Sep 2013 17:23:56 -0400
> Subject: [PATCH] OVAL signoff on service_rhnsd_disabled.xml
>
> [tony at rhel6 checks]$ ./testcheck.py service_rhnsd_disabled.xml
> Evaluating with OVAL tempfile : /tmp/service_rhnsd_disabled4jfbEx.xml
> Writing results to : /tmp/service_rhnsd_disabled4jfbEx.xml-results
> Definition oval:scap-security-guide.testing:def:101: false
> Definition oval:scap-security-guide.testing:def:100: false
> Evaluation done.
> [tony at rhel6 checks]$ chkconfig rhnsd off
> You do not have enough privileges to perform this operation.
> [tony at rhel6 checks]$ sudo chkconfig rhnsd off
> [tony at rhel6 checks]$ ./testcheck.py service_rhnsd_disabled.xml
> Evaluating with OVAL tempfile : /tmp/service_rhnsd_disabledbWy4lJ.xml
> Writing results to : /tmp/service_rhnsd_disabledbWy4lJ.xml-results
> Definition oval:scap-security-guide.testing:def:101: false
> Definition oval:scap-security-guide.testing:def:100: true
> Evaluation done.
> [tony at rhel6 checks]$ sudo service rhnsd stop
> Stopping Red Hat Network Daemon:                           [  OK  ]
> [tony at rhel6 checks]$ ./testcheck.py service_rhnsd_disabled.xml
> Evaluating with OVAL tempfile : /tmp/service_rhnsd_disabledrq9CRE.xml
> Writing results to : /tmp/service_rhnsd_disabledrq9CRE.xml-results
> Definition oval:scap-security-guide.testing:def:101: false
> Definition oval:scap-security-guide.testing:def:100: true
> Evaluation done.
> ---
>   RHEL6/input/checks/service_rhnsd_disabled.xml |    1 +
>   1 files changed, 1 insertions(+), 0 deletions(-)
>
> diff --git a/RHEL6/input/checks/service_rhnsd_disabled.xml b/RHEL6/input/checks/service_rhnsd_disabled.xml
> index ff0779f..240ed80 100644
> --- a/RHEL6/input/checks/service_rhnsd_disabled.xml
> +++ b/RHEL6/input/checks/service_rhnsd_disabled.xml
> @@ -8,6 +8,7 @@
>           <platform>Red Hat Enterprise Linux 6</platform>
>         </affected>
>         <description>The rhnsd service should be disabled if possible.</description>
> +      <reference source="tony" ref_id="20130927" ref_url="test_attestation"/>
>       </metadata>
>      <criteria comment="package rhnsd removed or service rhnsd is not configured to start" operator="OR">
>       <extend_definition comment="rhnsd removed" definition_ref="package_rhnsd_removed" />
> -- 1.7.1
finally getting off your rear and becoming a commiter, eh? ;) welcome!

ack
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130927/8ac4644d/attachment.html>


More information about the scap-security-guide mailing list