September 2013 Archives by date
Starting: Sun Sep 1 14:08:59 UTC 2013
Ending: Mon Sep 30 18:16:20 UTC 2013
Messages: 301
- Various False Positives?
Shawn Wells
- [PATCH 0/3] STIG bugfixes
Shawn Wells
- [PATCH 1/3] OVAL signoff for template_permissions
Shawn Wells
- [PATCH 2/3] Updated STIG refine values for ucredit, ocredit, lcredit
Shawn Wells
- [PATCH 3/3] [bugfix] Updated regex+filepath for umask_for_daemons
Shawn Wells
- [PATCH] [bugfix] Updated selinux_bootloader_notdisabled per ticket 391
Shawn Wells
- Various False Positives?
Shawn Wells
- [PATCH 0/3] STIG bugfixes
Dave Smith
- [PATCH] removed HOWTO text for openssl
Jeffrey Blank
- [PATCH] [bugfix] Updated selinux_bootloader_notdisabled per ticket 391
Jeffrey Blank
- Various False Positives?
Jeffrey Blank
- Various False Positives?
Jeffrey Blank
- Profiles, or I guess I was sleeping during class.
Jeffrey Blank
- [PATCH 0/3] STIG bugfixes
Jeffrey Blank
- Aug29 Benchmarks
Jeffrey Blank
- [PATCH] adjustment to combinechecks.py duplicate ID text
Jeffrey Blank
- Results for "make validate" from current git repo
Jeffrey Blank
- Aug29 Benchmarks
Ronayne, James K.
- Aug29 Benchmarks
Moessbauer, David
- Aug29 Benchmarks
Gary Gapinski
- Possibility of Fedora SCAP content to be served by SCAP security guide repository (either as subdirectory or via separated branch)?
Jan Lieskovsky
- Aug29 Benchmarks
Moessbauer, David
- Aug29 Benchmarks
Ronayne, James K.
- Aug29 Benchmarks
Moessbauer, David
- Fwd: SCAP Compliance Checker 3.1.1 Final Release
Shawn Wells
- Various False Positives?
Maura Dailey
- [PATCH] created Rule to restrict access to dmesg
David Smith
- [PATCH 0/3] STIG bugfixes
Maura Dailey
- [PATCH] [bugfix] Updated selinux_bootloader_notdisabled per ticket 391
Maura Dailey
- Various False Positives?
Shane Shaffer
- Various False Positives?
Maura Dailey
- Possibility of Fedora SCAP content to be served by SCAP security guide repository (either as subdirectory or via separated branch)?
Shawn Wells
- [PATCH] created Rule to restrict access to dmesg
Shawn Wells
- Various False Positives?
Shawn Wells
- Various False Positives?
Shawn Wells
- [PATCH] [bugfix] Updated selinux_bootloader_notdisabled per ticket 391
Shawn Wells
- [PATCH] [bugfix] Updated selinux_bootloader_notdisabled per ticket 391
Shawn Wells
- [PATCH 0/3] STIG bugfixes
Shawn Wells
- Possibility of Fedora SCAP content to be served by SCAP security guide repository (either as subdirectory or via separated branch)?
Jan Lieskovsky
- Possibility of Fedora SCAP content to be served by SCAP security guide repository (either as subdirectory or via separated branch)?
Moessbauer, David
- Possibility of Fedora SCAP content to be served by SCAP security guide repository (either as subdirectory or via separated branch)?
Shawn Wells
- Possibility of Fedora SCAP content to be served by SCAP security guide repository (either as subdirectory or via separated branch)?
Shawn Wells
- [PATCH] [bugfix] Updated selinux_bootloader_notdisabled per ticket 391
Maura Dailey
- [PATCH] [bugfix] Updated selinux_bootloader_notdisabled per ticket 391
Maura Dailey
- [PATCH 0/2] added XCCDF and OVAL for kernel.dmesg_restrict
David Smith
- [PATCH 1/2] new rule for restricting access to dmesg
David Smith
- [PATCH 2/2] new OVAL check for kernel.dmesg_restrict
David Smith
- [PATCH] [bugfix] Updated selinux_bootloader_notdisabled per ticket 391
Shawn Wells
- [PATCH 0/2] added XCCDF and OVAL for kernel.dmesg_restrict
Shawn Wells
- Possibility of Fedora SCAP content to be served by SCAP security guide repository (either as subdirectory or via separated branch)?
Moessbauer, David
- [PATCH] created Rule to restrict access to dmesg
Jeffrey Blank
- mappings to DISA STIG identifiers
Jeffrey Blank
- mappings to DISA STIG identifiers
Moessbauer, David
- Possibility of Fedora SCAP content to be served by SCAP security guide repository (either as subdirectory or via separated branch)?
Jeffrey Blank
- mappings to DISA STIG identifiers
Jeffrey Blank
- mappings to DISA STIG identifiers
Moessbauer, David
- mappings to DISA STIG identifiers
Burns, Robert K (US SSA)
- mappings to DISA STIG identifiers
Burns, Robert K (US SSA)
- bug: deny_password_attempts* seems broken
Paul Tittle (Contractor)
- [PATCH 00/13] remediation + OVAL updates for SSH section
Shawn Wells
- [PATCH 01/13] umask_for_daemons
Shawn Wells
- [PATCH 02/13] Update to network_disable_zeroconf OVAL
Shawn Wells
- [PATCH 03/13] sshd_use_approved_ciphers OVAL
Shawn Wells
- [PATCH 04/13] New remediation
Shawn Wells
- [PATCH 05/13] Updated sshd_disable_rhosts
Shawn Wells
- [PATCH 06/13] OVAL + remediation for sshd_set_keepalive
Shawn Wells
- [PATCH 07/13] OVAL + remediation for sshd_disable_root_login
Shawn Wells
- [PATCH 08/13] OVAL + remediation
Shawn Wells
- [PATCH 09/13] OVAL + remediation
Shawn Wells
- [PATCH 10/13] remediation + OVAL for sshd_set_idle_timeout
Shawn Wells
- [PATCH 11/13] remediation + OVAL for sshd_disable_empty_passwords
Shawn Wells
- [PATCH 12/13] [bugfix] sshd_set_idle_timeout.xml --> sshd_set_idle_timeout.sh (remediation script)
Shawn Wells
- [PATCH 13/13] remediation + OVAL for sshd_enable_warning_banner
Shawn Wells
- [PATCH 02/13] Update to network_disable_zeroconf OVAL
David Smith
- [PATCH] [bugfix] Updated APIPA addresses as identified by David Smith
Shawn Wells
- [PATCH 02/13] Update to network_disable_zeroconf OVAL
Shawn Wells
- [PATCH 00/13] remediation + OVAL updates for SSH section
David Smith
- [PATCH 00/13] remediation + OVAL updates for SSH section
Shawn Wells
- bug: deny_password_attempts* seems broken
Shawn Wells
- [PATCH 04/13] New remediation
Jeffrey Blank
- mappings to DISA STIG identifiers
Shawn Wells
- mappings to DISA STIG identifiers
Trey Henefield
- [PATCH 04/13] New remediation
Trevor Vaughan
- [PATCH 04/13] New remediation
Shawn Wells
- [PATCH] New check for discovering bind mount on /var/tmp
Maura Dailey
- [PATCH] New check uses /etc/mtab and mount partition check to look for bind mount on /var/tmp
Maura Dailey
- [PATCH] Tested partition checks, ensured they returned valid partitions.
Maura Dailey
- [PATCH] grub.conf is not guaranteed to be in /boot/grub if the system is using EFI, so I added a test for its default location in /boot/efi/EFI/redhat
Maura Dailey
- [PATCH] New check uses /etc/mtab and mount partition check to look for bind mount on /var/tmp
leam hall
- [PATCH] Tested partition checks, ensured they returned valid partitions.
David Smith
- [PATCH] Tested partition checks, ensured they returned valid partitions.
leam hall
- [PATCH] Tested partition checks, ensured they returned valid partitions.
leam hall
- [PATCH] New check uses /etc/mtab and mount partition check to look for bind mount on /var/tmp
Shawn Wells
- [PATCH] New check uses /etc/mtab and mount partition check to look for bind mount on /var/tmp
Maura Dailey
- [PATCH] Tested partition checks, ensured they returned valid partitions.
Maura Dailey
- [PATCH] New check uses /etc/mtab and mount partition check to look for bind mount on /var/tmp
Shawn Wells
- [PATCH] New check uses /etc/mtab and mount partition check to look for bind mount on /var/tmp
leam hall
- [PATCH] New check uses /etc/mtab and mount partition check to look for bind mount on /var/tmp
Shawn Wells
- [PATCH] grub.conf is not guaranteed to be in /boot/grub if the system is using EFI, so I added a test for its default location in /boot/efi/EFI/redhat
Shawn Wells
- [PATCH] grub.conf is not guaranteed to be in /boot/grub if the system is using EFI, so I added a test for its default location in /boot/efi/EFI/redhat
Shawn Wells
- [PATCH] grub.conf is not guaranteed to be in /boot/grub if the system is using EFI, so I added a test for its default location in /boot/efi/EFI/redhat
Maura Dailey
- [PATCH] grub.conf is not guaranteed to be in /boot/grub if the system is using EFI, so I added a test for its default location in /boot/efi/EFI/redhat
Maura Dailey
- [PATCH] grub.conf is not guaranteed to be in /boot/grub if the system is using EFI, so I added a test for its default location in /boot/efi/EFI/redhat
Shawn Wells
- [PATCH] grub.conf is not guaranteed to be in /boot/grub if the system is using EFI, so I added a test for its default location in /boot/efi/EFI/redhat
Maura Dailey
- [PATCH 04/13] New remediation
Trevor Vaughan
- Grub.conf file permissions
Maura Dailey
- Current false positve list
leam hall
- Current false positve list
leam hall
- [PATCH 0/8] Introduce FEDORA directory skeleton and transform scripts. Include start up 'test' profile having two gpgcheck scans
Jan Lieskovsky
- [PATCH 1/8] Add Makefile, main README, and scap-security-guide.spec file, that will be used for building Fedora scap-security-guide (source) RPM package.
Jan Lieskovsky
- [PATCH 2/8] Add FEDORA input/checks subdir content - Fedora-19 system detection and oval definitions for two gpgcheck related tests. Include Fedora CPE dictionary too.
Jan Lieskovsky
- [PATCH 3/8] Add Fedora-19 basic guide XML (and corresponding XSLT) files.
Jan Lieskovsky
- [PATCH 4/8] Add Introduction XML file, test profile XML definition, and System Settings XML file.
Jan Lieskovsky
- [PATCH 5/8] Add 'Installing and Maintaining Software' and 'Updating Software' XML files.
Jan Lieskovsky
- [PATCH 6/8] Add transformation *.py scripts and *.xslt content, required for building Fedora's XCCDF, OVAL, and guide content.
Jan Lieskovsky
- [PATCH 7/8] Add verify-references.py testing script (required for validation of generated XML files), and corresponding README file for it.
Jan Lieskovsky
- [PATCH 8/8] Update main Makefile with FEDORA_SPEC, FEDORA_RPM_DEPS variables, and fedora-tarball, fedora-srpm, and fedora-rpm rules definition, so it would be possible to create Fedora (source) RPM package from FEDORA directory content.
Jan Lieskovsky
- [PATCH 0/8] Introduce FEDORA directory skeleton and transform scripts. Include start up 'test' profile having two gpgcheck scans
David Smith
- Few more false positives from the RPM content
Leam Hall
- Few more false positives from the RPM content
Shawn Wells
- Few more false positives from the RPM content
Leam Hall
- [PATCH 1/8] Add Makefile, main README, and scap-security-guide.spec file, that will be used for building Fedora scap-security-guide (source) RPM package.
Shawn Wells
- [PATCH 2/8] Add FEDORA input/checks subdir content - Fedora-19 system detection and oval definitions for two gpgcheck related tests. Include Fedora CPE dictionary too.
Shawn Wells
- [PATCH 3/8] Add Fedora-19 basic guide XML (and corresponding XSLT) files.
Shawn Wells
- [PATCH 5/8] Add 'Installing and Maintaining Software' and 'Updating Software' XML files.
Shawn Wells
- [PATCH 0/8] Introduce FEDORA directory skeleton and transform scripts. Include start up 'test' profile having two gpgcheck scans
Shawn Wells
- Few more false positives from the RPM content
Shawn Wells
- [PATCH 0/8] Introduce FEDORA directory skeleton and transform scripts. Include start up 'test' profile having two gpgcheck scans
David Smith
- [PATCH 00/22] OVAL testing, remediation, bugfixes
Shawn Wells
- [PATCH 01/22] XCCDF & OVAL signoff for file_ownership_library_dirs + remediation
Shawn Wells
- [PATCH 02/22] OVAL signoff + remediation
Shawn Wells
- [PATCH 03/22] Added Remediation for accounts_minimum_age_login_defs
Shawn Wells
- [PATCH 04/22] Added remediation
Shawn Wells
- [PATCH 05/22] [bugfix] Updated filepaths
Shawn Wells
- [PATCH 06/22] OVAL signoff + remediation
Shawn Wells
- [PATCH 07/22] Added Remediation
Shawn Wells
- [PATCH 08/22] Added remediation
Shawn Wells
- [PATCH 09/22] OVAL signoff + remediation
Shawn Wells
- [PATCH 10/22] OVAL signoff + remediation: require_singleuser_auth
Shawn Wells
- [PATCH 11/22] accounts_* remediation update
Shawn Wells
- [PATCH 12/22] Updated sysctl templates
Shawn Wells
- [PATCH 13/22] Updated kernel module naming schemes
Shawn Wells
- [PATCH 14/22] New remediation template
Shawn Wells
- [PATCH 15/22] OVAL signoff + remediation: auditd_data_retention_admin_space_left_action
Shawn Wells
- [PATCH 16/22] [ticket 393] Updated securetty_root_login_console_only
Shawn Wells
- [PATCH 17/22] [ticket 390] Updated ensure_redhat_gpgkey_installed
Shawn Wells
- [PATCH 18/22] Added remediation for umask_for_daemons
Shawn Wells
- [PATCH 19/22] Added remediation for disable_users_coredumps
Shawn Wells
- [PATCH 20/22] OVAL signoff + remediation: no_empty_passwords
Shawn Wells
- [PATCH 21/22] Updated accounts_password_minlen_login_defs
Shawn Wells
- [PATCH 22/22] Updated XCCDF/OVAL namings
Shawn Wells
- Few more false positives from the RPM content
Shawn Wells
- Current false positve list
Shawn Wells
- [PATCH 0/8] Introduce FEDORA directory skeleton and transform scripts. Include start up 'test' profile having two gpgcheck scans
Jan Lieskovsky
- [PATCH 1/8] Add Makefile, main README, and scap-security-guide.spec file, that will be used for building Fedora scap-security-guide (source) RPM package.
Jan Lieskovsky
- [PATCH ] Added remediation
Leam Hall
- [*] RHEL-6 / JBossEAP5 SSG *.spec, *.src.rpm && *.rpm rpmlint errors
Jan Lieskovsky
- [*] RHEL-6 / JBossEAP5 SSG *.spec, *.src.rpm && *.rpm rpmlint errors
Shawn Wells
- [PATCH] RHEL6 verify-input-sanity.py: Replace lxml.etree.XMLSyntaxError traceback with path to problematic XCCDF file. OpenStack ditto. RHEVM3 ditto.
Jan Lieskovsky
- [PATCH] Fix XML syntax errors in src/input/auxiliary/nist_support.xml
Jan Lieskovsky
- [PATCH 14/22] New remediation template
Jeffrey Blank
- [PATCH 14/22] New remediation template
Shawn Wells
- [PATCH 02/22] OVAL signoff + remediation
Jeffrey Blank
- [PATCH 06/22] OVAL signoff + remediation
Jeffrey Blank
- [PATCH 09/22] OVAL signoff + remediation
Jeffrey Blank
- [PATCH 03/22] Added Remediation for accounts_minimum_age_login_defs
Jeffrey Blank
- [PATCH 21/22] Updated accounts_password_minlen_login_defs
Jeffrey Blank
- [PATCH 05/22] [bugfix] Updated filepaths
Jeffrey Blank
- [PATCH 03/22] Added Remediation for accounts_minimum_age_login_defs
Shawn Wells
- [PATCH 07/22] Added Remediation
Jeffrey Blank
- [PATCH 01/22] XCCDF & OVAL signoff for file_ownership_library_dirs + remediation
Jeffrey Blank
- [PATCH] Fix XML syntax errors in src/input/auxiliary/nist_support.xml
Shawn Wells
- [PATCH ] Added remediation
Jeffrey Blank
- [PATCH 04/22] Added remediation
Jeffrey Blank
- [PATCH ] Added remediation
Shawn Wells
- [PATCH ] Added remediation
Jeffrey Blank
- [PATCH 08/22] Added remediation
Jeffrey Blank
- [PATCH ] Added remediation
Shawn Wells
- [PATCH 10/22] OVAL signoff + remediation: require_singleuser_auth
Jeffrey Blank
- [PATCH 11/22] accounts_* remediation update
Jeffrey Blank
- [PATCH 12/22] Updated sysctl templates
Jeffrey Blank
- [PATCH 10/22] OVAL signoff + remediation: require_singleuser_auth
Shawn Wells
- [PATCH 13/22] Updated kernel module naming schemes
Jeffrey Blank
- [PATCH] RHEL6 verify-input-sanity.py: Replace lxml.etree.XMLSyntaxError traceback with path to problematic XCCDF file. OpenStack ditto. RHEVM3 ditto.
Shawn Wells
- [PATCH 15/22] OVAL signoff + remediation: auditd_data_retention_admin_space_left_action
Jeffrey Blank
- [PATCH 13/22] Updated kernel module naming schemes
Shawn Wells
- [PATCH 16/22] [ticket 393] Updated securetty_root_login_console_only
Jeffrey Blank
- [PATCH 17/22] [ticket 390] Updated ensure_redhat_gpgkey_installed
Jeffrey Blank
- [PATCH 16/22] [ticket 393] Updated securetty_root_login_console_only
Shawn Wells
- [PATCH 18/22] Added remediation for umask_for_daemons
Jeffrey Blank
- [PATCH 1/8] Add Makefile, main README, and scap-security-guide.spec file, that will be used for building Fedora scap-security-guide (source) RPM package.
Shawn Wells
- [PATCH] RHEL6 verify-input-sanity.py: Replace lxml.etree.XMLSyntaxError traceback with path to problematic XCCDF file. OpenStack ditto. RHEVM3 ditto.
Jeffrey Blank
- [PATCH 19/22] Added remediation for disable_users_coredumps
Jeffrey Blank
- [PATCH 20/22] OVAL signoff + remediation: no_empty_passwords
Jeffrey Blank
- [PATCH 22/22] Updated XCCDF/OVAL namings
Jeffrey Blank
- [PATCH 0/8] Introduce FEDORA directory skeleton and 'common' profile having two gpgcheck scans - version #2
Jan Lieskovsky
- [PATCH 1/8] Add FEDORA Makefile, README, and scap-security-guide.spec files - version #2
Jan Lieskovsky
- [PATCH 2/8] Add input/checks subdir content: Two gpgchecks, testcheck.py script, F-19 detection, and F-19 CPE dictionary - version #2
Jan Lieskovsky
- [PATCH 3/8] Add F-19 basic guide XML (and corresponding XSLT) files - version #2
Jan Lieskovsky
- [PATCH 4/8] Add Introduction and System Settings XML files. Common profile XML definition - version #2
Jan Lieskovsky
- [PATCH 5/8] Add 'Installing and Maintaining Software', and 'Updating Software' XML files - version #2
Jan Lieskovsky
- [PATCH 22/22] Updated XCCDF/OVAL namings
Shawn Wells
- [PATCH 6/8] Add transformations *.py scripts and XSLT content. Make a link for testcheck.py - version #2
Jan Lieskovsky
- [PATCH 7/8] Add FEDORA/utils content (README plus two verification scripts) - version #2
Jan Lieskovsky
- [PATCH 8/8] Update main Makefile it to reflect new FEDORA content - version #2
Jan Lieskovsky
- [PATCH 0/8] Introduce FEDORA directory skeleton and 'common' profile having two gpgcheck scans - version #2
David Smith
- [PATCH 1/8] Add FEDORA Makefile, README, and scap-security-guide.spec files - version #2
Shawn Wells
- [PATCH 0/8] Introduce FEDORA directory skeleton and 'common' profile having two gpgcheck scans - version #2
Dave Smith
- [PATCH 03/22] Added Remediation for accounts_minimum_age_login_defs
Josh Kayse
- [PATCH] Adding testrefs to mount_option_dev_shm_* checks, all appear to function correctly.
Maura Dailey
- [PATCH 1/8] Add FEDORA Makefile, README, and scap-security-guide.spec files - version #3 [was - version #2]
Jan Lieskovsky
- [PATCH] Adding testrefs to mount_option_dev_shm_* checks, all appear to function correctly.
David Smith
- [PATCH] More testrefs, this time for mount_option_tmp checks
Maura Dailey
- [PATCH] More testrefs, this time for mount_option_tmp checks
David Smith
- [PATCH 0/2] Additional OVAL testing and cleanup
David Smith
- [PATCH 1/2] corrected naming mismatch issues picked up by verify-input-sanity
David Smith
- [PATCH 2/2] added testrefs to a number of OVAL checks
David Smith
- [PATCH 1/9] OVAL signoff for accounts_no_shelllogin_for_systemaccounts OVAL signoff: accounts_no_shelllogin_for_systemaccounts
shawn at redhat.com
- [PATCH 2/9] OVAL signoff for accounts_password_all_shadowed TESTING: [user at redhat-thing-1 checks]$ awk -F: '($2 != "x") {print}' /etc/passwd [user at redhat-thing-1 checks]$ awk -F: '($2 != "x") {print}' /etc/passwd ftp:secrethash:14:50:FTP User:/var/ftp:/sbin/nologin [user at redhat-thing-1 checks]$ ./testcheck.py no_has^C [user at redhat-thing-1 checks]$ ls | grep hash rpm_verify_hashes.xml set_password_hashing_algorithm_libuserconf.xml set_password_hashing_algorithm_logindefs.xml set_password_hashing_algorithm_systemauth.xml [user at redhat-thing-1 checks]$ ./testcheck.py accounts_password_all_shadowed.xml Evaluating with OVAL tempfile : /tmp/accounts_password_all_shadowednpqbeQ.xml Writing results to : /tmp/accounts_password_all_shadowednpqbeQ.xml-results Definition oval:scap-security-guide.testing:def:110: false Evaluation done. [user at redhat-thing-1 checks]$ awk -F: '($2 != "x") {print}' /etc/passwd [user at redhat-thing-1 checks]$ ./testcheck.py accounts_password_all_shadowed .xml Evaluating with OVAL tempfile : /tmp/accounts_password_all_shadowedUQOSvB.xml Writing results to : /tmp/accounts_password_all_shadowedUQOSvB.xml-results Definition oval:scap-security-guide.testing:def:110: true Evaluation done.
shawn at redhat.com
- [PATCH 3/9] OVAL/XCCDF namings for no_shelllogin_for_systemaccounts
shawn at redhat.com
- [PATCH 4/9] OVAL signoff no_empty_passwords [user at redhat-thing-1 checks]$ grep nullok /etc/pam.d/system-auth [user at redhat-thing-1 checks]$ ./testcheck.py no_empty_passwords.xml Evaluating with OVAL tempfile : /tmp/no_empty_passwordsLQqZsO.xml Writing results to : /tmp/no_empty_passwordsLQqZsO.xml-results Definition oval:scap-security-guide.testing:def:107: true Evaluation done. [user at redhat-thing-1 checks]$ vim /etc/pam.d/system-auth [user at redhat-thing-1 checks]$ grep nullok /etc/pam.d/system-auth auth sufficient pam_unix.so try_first_pass nullok [user at redhat-thing-1 checks]$ ./testcheck.py no_empty_passwords.xml Evaluating with OVAL tempfile : /tmp/no_empty_passwordsqFQIA5.xml Writing results to : /tmp/no_empty_passwordsqFQIA5.xml-results Definition oval:scap-security-guide.testing:def:107: false Evaluation done.
shawn at redhat.com
- [PATCH 5/9] OVAL signoff: file_groupowner_etc_shadow
shawn at redhat.com
- [PATCH 6/9] OVAL signoff file_groupowner_etc_gshadow [user at redhat-thing-1 checks]$ ls -lL /etc/gshadow ----------. 1 root root 723 Sep 16 12:58 /etc/gshadow [user at redhat-thing-1 checks]$ ./testcheck.py file_groupowner_etc_gshadow.xml Evaluating with OVAL tempfile : /tmp/file_groupowner_etc_gshadow05JsdI.xml Writing results to : /tmp/file_groupowner_etc_gshadow05JsdI.xml-results Definition oval:scap-security-guide.testing:def:118: true Evaluation done. [user at redhat-thing-1 checks]$ sudo chgrp user /etc/gshadow ; ls -lL /etc/gshadow ----------. 1 root user 723 Sep 16 12:58 /etc/gshadow [user at redhat-thing-1 checks]$ ./testcheck.py file_groupowner_etc_gshadow.xml Evaluating with OVAL tempfile : /tmp/file_groupowner_etc_gshadowQ1t_rc.xml Writing results to : /tmp/file_groupowner_etc_gshadowQ1t_rc.xml-results Definition oval:scap-security-guide.testing:def:118: false Evaluation done.
shawn at redhat.com
- [PATCH 7/9] OVAL signoff file_groupowner_etc_passwd
shawn at redhat.com
- [PATCH 8/9] OVAL signoff file_groupowner_etc_group
shawn at redhat.com
- [PATCH 9/9] OVAL signoff file_permissions_etc_group
shawn at redhat.com
- [PATCH 1/9] OVAL signoff for accounts_no_shelllogin_for_systemaccounts OVAL signoff: accounts_no_shelllogin_for_systemaccounts
David Smith
- [PATCH 0/2] Additional OVAL testing and cleanup
Shawn Wells
- [PATCH 1/9] OVAL signoff for accounts_no_shelllogin_for_systemaccounts OVAL signoff: accounts_no_shelllogin_for_systemaccounts
Shawn Wells
- [PATCH 1/8] Add FEDORA Makefile, README, and scap-security-guide.spec files - version #3 [was - version #2]
Shawn Wells
- [PATCH 03/22] Added Remediation for accounts_minimum_age_login_defs
Shawn Wells
- [PATCH 0/8] Introduce FEDORA directory skeleton and transform scripts. Include start up 'test' profile having two gpgcheck scans
Shawn Wells
- Frank Caviggia - Reporting for Duty (SCAP-SECURITY-GUIDE)
fcaviggi at redhat.com
- EXTERNAL: Frank Caviggia - Reporting for Duty (SCAP-SECURITY-GUIDE)
Albrecht, Thomas C
- [PATCH 0/3] Additional OVAL signoffs
David Smith
- [PATCH 1/3] OVAL signoff for sysctl_kernel_randomize_va_space
David Smith
- [PATCH 2/3] OVAL signoff for sysctl_kernel_exec_shield
David Smith
- [PATCH 3/3] OVAL signoff for multiple sysctl_net_ipv4 checks
David Smith
- EXTERNAL: Frank Caviggia - Reporting for Duty (SCAP-SECURITY-GUIDE)
fcaviggi at redhat.com
- [PATCH 0/3] Additional OVAL signoffs
Shawn Wells
- Fixed reference tag in accounts_password_all_shadowed.xml
Maura Dailey
- Fixed reference tag in accounts_password_all_shadowed.xml
Shawn Wells
- [PATCH] [bugfix] Invalid dates in RHEL6 RPM spec file
Shawn Wells
- RHEL5 vs RHEL6 language on HBSS
Shawn Wells
- RHEL5 vs RHEL6 language on HBSS
leam hall
- RHEL5 vs RHEL6 language on HBSS
Jess Sightler
- RHEL5 vs RHEL6 language on HBSS (UNCLASSIFIED)
Beavers, Randall D. CTR (US)
- RHEL5 vs RHEL6 language on HBSS
leam hall
- RHEL5 vs RHEL6 language on HBSS (UNCLASSIFIED)
Vincent Passaro
- RHEL5 vs RHEL6 language on HBSS
Truhn, Chad M CTR NSWCDD, CXA30
- RHEL5 vs RHEL6 language on HBSS
Moessbauer, David
- RHEL5 vs RHEL6 language on HBSS
Brian Peake
- scap-security-guide Digest, Vol 25, Issue 74
Saxon, William G CIV SPAWARSYSCEN-ATLANTIC, 58810
- scap-security-guide Digest, Vol 25, Issue 74
Josh Kayse
- [PATCH] root user PATH checks
Maura Dailey
- [PATCH] Updated and tested root path checks
Maura Dailey
- XCCDF: using value references in rule description
Rui Pedro Bernardino
- [PATCH] [Fedora] Introduce better rpm versioning scheme
Jan Lieskovsky
- scan question
Kordell, Luke T
- [PATCH] [Fedora] Introduce better rpm versioning scheme
Shawn Wells
- scan question
Shawn Wells
- [PATCH] Updated and tested root path checks
Shawn Wells
- [PATCH] [bugfix] Invalid dates in RHEL6 RPM spec file
Jan Lieskovsky
- XCCDF: using value references in rule description
Rui Pedro Bernardino
- XCCDF: using value references in rule description
Shawn Wells
- scap-security-guide Digest, Vol 25, Issue 74
Shawn Wells
- [PATCH] Updated and tested root path checks
Maura Dailey
- Fwd: Kickstart with SSG/fixes and More
Shawn Wells
- [PATCH] OVAL signoff on service_rhnsd_disabled.xml
Tony James
- [PATCH] OVAL signoff on service_rhnsd_disabled.xml
Shawn Wells
- EXTERNAL: Re: scan question
Kordell, Luke T
- scap-security-guide Digest, Vol 25, Issue 74
Ed Sealing
- request for help creating new oval: file_ownership_binary_dirs
Shawn Wells
- request for help creating new oval: file_ownership_binary_dirs
Shawn Wells
- [PATCH 1/8] OVAL signoff
Shawn Wells
- [PATCH 2/8] new remediation file_permissions_library_dirs
Shawn Wells
- [PATCH 3/8] Updated kernel_module_disabled OVAL template
Shawn Wells
- [PATCH 4/8] OVAL signoff file_permissions_library_dirs
Shawn Wells
- [PATCH 5/8] New OVAL file_permissions_binary_dirs
Shawn Wells
- [PATCH 6/8] OVAL signoff accounts_password_pam_cracklib_retry
Shawn Wells
- [PATCH 7/8] updated OVAL template template_sysctl
Shawn Wells
- [PATCH 8/8] OVAL signoff auditd_data_retention_action_mail_acct
Shawn Wells
- [PATCH 1/8] OVAL signoff
Shawn Wells
- EXTERNAL: Re: scan question
Shawn Wells
- [PATCH] XCCDF Profile Cleanup
Shawn Wells
- EXTERNAL: Re: scan question
Shawn Wells
- Frank Caviggia - Reporting for Duty (SCAP-SECURITY-GUIDE)
Shawn Wells
- [PATCH] XCCDF Profile Cleanup, take 2
Shawn Wells
- [PATCH] XCCDF Profile Cleanup, take 2 (now with correct patch)
Shawn Wells
- Frank Caviggia - Reporting for Duty (SCAP-SECURITY-GUIDE)
Stuart Green
- [PATCH] XCCDF: using value references in rule description for RHEL6 content
Rui Pedro Bernardino
- Signed vs unsigned?
leam hall
- Signed vs unsigned?
Shawn Wells
- Fun with limits.conf
fcaviggi at redhat.com
- Fun with limits.conf
Shawn Wells
- Fun with limits.conf
leam hall
- request for help creating new oval: file_ownership_binary_dirs
Maura Dailey
- [PATCH] *** SUBJECT HERE ***
Frank Caviggia
- [PATCH] Added checks for 'hard' or '-' for checks in /etc/security/limits.conf
Frank Caviggia
- [PATCH] Added checks for 'hard' or '-' for checks in /etc/security/limits.conf
Shawn Wells
- [PATCH] Added checks for 'hard' or '-' for checks in /etc/security/limits.conf
Shane Shaffer
Last message date:
Mon Sep 30 18:16:20 UTC 2013
Archived on: Mon Sep 30 18:16:30 UTC 2013
This archive was generated by
Pipermail 0.09 (Mailman edition).