[PATCH 09/15] Added OVAL signoff to service_enabled and service_disabled templates

Shawn Wells shawn at redhat.com
Fri Apr 18 03:31:04 UTC 2014


-------------- next part --------------
>From 0ed1626f441efaaca9d075ce774098265a507fc1 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 17 Apr 2014 22:18:08 -0400
Subject: [PATCH 09/15] Added OVAL signoff to service_enabled and service_disabled templates

---
 RHEL/6/input/checks/service_abrtd_disabled.xml     |    2 +-
 RHEL/6/input/checks/service_acpid_disabled.xml     |    1 +
 RHEL/6/input/checks/service_atd_disabled.xml       |    1 +
 RHEL/6/input/checks/service_auditd_enabled.xml     |    2 +-
 RHEL/6/input/checks/service_autofs_disabled.xml    |    2 +-
 .../input/checks/service_avahi-daemon_disabled.xml |    2 +-
 RHEL/6/input/checks/service_bluetooth_disabled.xml |    2 +-
 .../6/input/checks/service_certmonger_disabled.xml |    1 +
 RHEL/6/input/checks/service_cgconfig_disabled.xml  |    1 +
 RHEL/6/input/checks/service_cgred_disabled.xml     |    1 +
 RHEL/6/input/checks/service_cpuspeed_disabled.xml  |    1 +
 RHEL/6/input/checks/service_crond_enabled.xml      |    2 +-
 RHEL/6/input/checks/service_cups_disabled.xml      |    1 +
 RHEL/6/input/checks/service_dhcpd_disabled.xml     |    1 +
 RHEL/6/input/checks/service_dovecot_disabled.xml   |    1 +
 RHEL/6/input/checks/service_haldaemon_disabled.xml |    1 +
 RHEL/6/input/checks/service_httpd_disabled.xml     |    1 +
 RHEL/6/input/checks/service_ip6tables_enabled.xml  |    2 +-
 RHEL/6/input/checks/service_iptables_enabled.xml   |    2 +-
 RHEL/6/input/checks/service_irqbalance_enabled.xml |    1 +
 RHEL/6/input/checks/service_kdump_disabled.xml     |    1 +
 RHEL/6/input/checks/service_mdmonitor_disabled.xml |    1 +
 .../6/input/checks/service_messagebus_disabled.xml |    1 +
 RHEL/6/input/checks/service_named_disabled.xml     |    1 +
 .../6/input/checks/service_netconsole_disabled.xml |    2 +-
 RHEL/6/input/checks/service_netfs_disabled.xml     |    1 +
 RHEL/6/input/checks/service_nfs_disabled.xml       |    1 +
 RHEL/6/input/checks/service_nfslock_disabled.xml   |    1 +
 RHEL/6/input/checks/service_ntpd_enabled.xml       |    2 +-
 RHEL/6/input/checks/service_oddjobd_disabled.xml   |    2 +-
 .../input/checks/service_portreserve_disabled.xml  |    1 +
 RHEL/6/input/checks/service_postfix_enabled.xml    |    2 +-
 RHEL/6/input/checks/service_psacct_enabled.xml     |    1 +
 RHEL/6/input/checks/service_qpidd_disabled.xml     |    2 +-
 RHEL/6/input/checks/service_quota_nld_disabled.xml |    1 +
 RHEL/6/input/checks/service_rdisc_disabled.xml     |    2 +-
 .../6/input/checks/service_restorecond_enabled.xml |    1 +
 RHEL/6/input/checks/service_rhnsd_disabled.xml     |    2 +-
 RHEL/6/input/checks/service_rhsmcertd_disabled.xml |    1 +
 RHEL/6/input/checks/service_rpcgssd_disabled.xml   |    1 +
 RHEL/6/input/checks/service_rpcidmapd_disabled.xml |    1 +
 .../6/input/checks/service_rpcsvcgssd_disabled.xml |    1 +
 RHEL/6/input/checks/service_rsyslog_enabled.xml    |    2 +-
 RHEL/6/input/checks/service_saslauthd_disabled.xml |    1 +
 RHEL/6/input/checks/service_smartd_disabled.xml    |    1 +
 RHEL/6/input/checks/service_smb_disabled.xml       |    1 +
 RHEL/6/input/checks/service_snmpd_disabled.xml     |    1 +
 RHEL/6/input/checks/service_squid_disabled.xml     |    1 +
 RHEL/6/input/checks/service_sshd_disabled.xml      |    1 +
 RHEL/6/input/checks/service_sysstat_disabled.xml   |    1 +
 RHEL/6/input/checks/service_tftp_disabled.xml      |    1 +
 RHEL/6/input/checks/service_vsftpd_disabled.xml    |    1 +
 RHEL/6/input/checks/service_xinetd_disabled.xml    |    2 +-
 RHEL/6/input/checks/service_ypbind_disabled.xml    |    2 +-
 54 files changed, 54 insertions(+), 18 deletions(-)

diff --git a/RHEL/6/input/checks/service_abrtd_disabled.xml b/RHEL/6/input/checks/service_abrtd_disabled.xml
index f195456..cf70873 100644
--- a/RHEL/6/input/checks/service_abrtd_disabled.xml
+++ b/RHEL/6/input/checks/service_abrtd_disabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The abrtd service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20131002" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package abrt removed or service abrtd is not configured to start" operator="OR">
     <extend_definition comment="abrt removed" definition_ref="package_abrt_removed" />
diff --git a/RHEL/6/input/checks/service_acpid_disabled.xml b/RHEL/6/input/checks/service_acpid_disabled.xml
index 184a053..2011eed 100644
--- a/RHEL/6/input/checks/service_acpid_disabled.xml
+++ b/RHEL/6/input/checks/service_acpid_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The acpid service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria operator="AND" comment="service acpid is not configured to start">
       <criterion comment="acpid runlevel 0" test_ref="test_runlevel0_acpid" />
diff --git a/RHEL/6/input/checks/service_atd_disabled.xml b/RHEL/6/input/checks/service_atd_disabled.xml
index 696f171..b58bb87 100644
--- a/RHEL/6/input/checks/service_atd_disabled.xml
+++ b/RHEL/6/input/checks/service_atd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The atd service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package at removed or service atd is not configured to start" operator="OR">
     <extend_definition comment="at removed" definition_ref="package_at_removed" />
diff --git a/RHEL/6/input/checks/service_auditd_enabled.xml b/RHEL/6/input/checks/service_auditd_enabled.xml
index 7124b8f..538b7bb 100644
--- a/RHEL/6/input/checks/service_auditd_enabled.xml
+++ b/RHEL/6/input/checks/service_auditd_enabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The auditd service should be enabled if possible.</description>
-      <reference source="DS" ref_id="20131002" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package audit installed and service auditd is configured to start" operator="AND">
     <extend_definition comment="audit installed" definition_ref="package_audit_installed" />
diff --git a/RHEL/6/input/checks/service_autofs_disabled.xml b/RHEL/6/input/checks/service_autofs_disabled.xml
index d4ec792..919e186 100644
--- a/RHEL/6/input/checks/service_autofs_disabled.xml
+++ b/RHEL/6/input/checks/service_autofs_disabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The autofs service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20130918" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria operator="AND" comment="service autofs is not configured to start">
       <criterion comment="autofs runlevel 0" test_ref="test_runlevel0_autofs" />
diff --git a/RHEL/6/input/checks/service_avahi-daemon_disabled.xml b/RHEL/6/input/checks/service_avahi-daemon_disabled.xml
index 3dfc1fa..1f48dae 100644
--- a/RHEL/6/input/checks/service_avahi-daemon_disabled.xml
+++ b/RHEL/6/input/checks/service_avahi-daemon_disabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The avahi-daemon service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20130918" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria operator="AND" comment="service avahi-daemon is not configured to start">
       <criterion comment="avahi-daemon runlevel 0" test_ref="test_runlevel0_avahi-daemon" />
diff --git a/RHEL/6/input/checks/service_bluetooth_disabled.xml b/RHEL/6/input/checks/service_bluetooth_disabled.xml
index 89818f9..893eb5a 100644
--- a/RHEL/6/input/checks/service_bluetooth_disabled.xml
+++ b/RHEL/6/input/checks/service_bluetooth_disabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The bluetooth service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20131002" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria operator="AND" comment="service bluetooth is not configured to start">
       <criterion comment="bluetooth runlevel 0" test_ref="test_runlevel0_bluetooth" />
diff --git a/RHEL/6/input/checks/service_certmonger_disabled.xml b/RHEL/6/input/checks/service_certmonger_disabled.xml
index 9a97a99..5e4160f 100644
--- a/RHEL/6/input/checks/service_certmonger_disabled.xml
+++ b/RHEL/6/input/checks/service_certmonger_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The certmonger service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria operator="AND" comment="service certmonger is not configured to start">
       <criterion comment="certmonger runlevel 0" test_ref="test_runlevel0_certmonger" />
diff --git a/RHEL/6/input/checks/service_cgconfig_disabled.xml b/RHEL/6/input/checks/service_cgconfig_disabled.xml
index a63a1dd..448de8b 100644
--- a/RHEL/6/input/checks/service_cgconfig_disabled.xml
+++ b/RHEL/6/input/checks/service_cgconfig_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The cgconfig service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package libcgroup removed or service cgconfig is not configured to start" operator="OR">
     <extend_definition comment="libcgroup removed" definition_ref="package_libcgroup_removed" />
diff --git a/RHEL/6/input/checks/service_cgred_disabled.xml b/RHEL/6/input/checks/service_cgred_disabled.xml
index 38f0f88..2fedbfe 100644
--- a/RHEL/6/input/checks/service_cgred_disabled.xml
+++ b/RHEL/6/input/checks/service_cgred_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The cgred service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria operator="AND" comment="service cgred is not configured to start">
       <criterion comment="cgred runlevel 0" test_ref="test_runlevel0_cgred" />
diff --git a/RHEL/6/input/checks/service_cpuspeed_disabled.xml b/RHEL/6/input/checks/service_cpuspeed_disabled.xml
index a64342c..6a82a71 100644
--- a/RHEL/6/input/checks/service_cpuspeed_disabled.xml
+++ b/RHEL/6/input/checks/service_cpuspeed_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The cpuspeed service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package cpuspeed removed or service cpuspeed is not configured to start" operator="OR">
     <extend_definition comment="cpuspeed removed" definition_ref="package_cpuspeed_removed" />
diff --git a/RHEL/6/input/checks/service_crond_enabled.xml b/RHEL/6/input/checks/service_crond_enabled.xml
index 7ce3989..99a43cb 100644
--- a/RHEL/6/input/checks/service_crond_enabled.xml
+++ b/RHEL/6/input/checks/service_crond_enabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The crond service should be enabled if possible.</description>
-      <reference source="DS" ref_id="20130918" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package cronie installed and service crond is configured to start" operator="AND">
     <extend_definition comment="cronie installed" definition_ref="package_cronie_installed" />
diff --git a/RHEL/6/input/checks/service_cups_disabled.xml b/RHEL/6/input/checks/service_cups_disabled.xml
index 112853a..9cc5c5e 100644
--- a/RHEL/6/input/checks/service_cups_disabled.xml
+++ b/RHEL/6/input/checks/service_cups_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The cups service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package cups removed or service cups is not configured to start" operator="OR">
     <extend_definition comment="cups removed" definition_ref="package_cups_removed" />
diff --git a/RHEL/6/input/checks/service_dhcpd_disabled.xml b/RHEL/6/input/checks/service_dhcpd_disabled.xml
index 268dea7..6050457 100644
--- a/RHEL/6/input/checks/service_dhcpd_disabled.xml
+++ b/RHEL/6/input/checks/service_dhcpd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The dhcpd service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package dhcp removed or service dhcpd is not configured to start" operator="OR">
     <extend_definition comment="dhcp removed" definition_ref="package_dhcp_removed" />
diff --git a/RHEL/6/input/checks/service_dovecot_disabled.xml b/RHEL/6/input/checks/service_dovecot_disabled.xml
index ad69860..76d3c59 100644
--- a/RHEL/6/input/checks/service_dovecot_disabled.xml
+++ b/RHEL/6/input/checks/service_dovecot_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The dovecot service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package dovecot removed or service dovecot is not configured to start" operator="OR">
     <extend_definition comment="dovecot removed" definition_ref="package_dovecot_removed" />
diff --git a/RHEL/6/input/checks/service_haldaemon_disabled.xml b/RHEL/6/input/checks/service_haldaemon_disabled.xml
index b22e537..94c04b5 100644
--- a/RHEL/6/input/checks/service_haldaemon_disabled.xml
+++ b/RHEL/6/input/checks/service_haldaemon_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The haldaemon service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package hal removed or service haldaemon is not configured to start" operator="OR">
     <extend_definition comment="hal removed" definition_ref="package_hal_removed" />
diff --git a/RHEL/6/input/checks/service_httpd_disabled.xml b/RHEL/6/input/checks/service_httpd_disabled.xml
index 327fb9b..8c7fcb2 100644
--- a/RHEL/6/input/checks/service_httpd_disabled.xml
+++ b/RHEL/6/input/checks/service_httpd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The httpd service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package httpd removed or service httpd is not configured to start" operator="OR">
     <extend_definition comment="httpd removed" definition_ref="package_httpd_removed" />
diff --git a/RHEL/6/input/checks/service_ip6tables_enabled.xml b/RHEL/6/input/checks/service_ip6tables_enabled.xml
index f3cd023..3c2d15f 100644
--- a/RHEL/6/input/checks/service_ip6tables_enabled.xml
+++ b/RHEL/6/input/checks/service_ip6tables_enabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The ip6tables service should be enabled if possible.</description>
-      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package iptables-ipv6 installed and service ip6tables is configured to start" operator="AND">
     <extend_definition comment="iptables-ipv6 installed" definition_ref="package_iptables-ipv6_installed" />
diff --git a/RHEL/6/input/checks/service_iptables_enabled.xml b/RHEL/6/input/checks/service_iptables_enabled.xml
index a8c7f7d..b5068a0 100644
--- a/RHEL/6/input/checks/service_iptables_enabled.xml
+++ b/RHEL/6/input/checks/service_iptables_enabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The iptables service should be enabled if possible.</description>
-      <reference source="DS" ref_id="20131002" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package iptables installed and service iptables is configured to start" operator="AND">
     <extend_definition comment="iptables installed" definition_ref="package_iptables_installed" />
diff --git a/RHEL/6/input/checks/service_irqbalance_enabled.xml b/RHEL/6/input/checks/service_irqbalance_enabled.xml
index 33b9077..e1bb9d1 100644
--- a/RHEL/6/input/checks/service_irqbalance_enabled.xml
+++ b/RHEL/6/input/checks/service_irqbalance_enabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The irqbalance service should be enabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package irqbalance installed and service irqbalance is configured to start" operator="AND">
     <extend_definition comment="irqbalance installed" definition_ref="package_irqbalance_installed" />
diff --git a/RHEL/6/input/checks/service_kdump_disabled.xml b/RHEL/6/input/checks/service_kdump_disabled.xml
index 4d5b950..1d11625 100644
--- a/RHEL/6/input/checks/service_kdump_disabled.xml
+++ b/RHEL/6/input/checks/service_kdump_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The kdump service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package kexec-tools removed or service kdump is not configured to start" operator="OR">
     <extend_definition comment="kexec-tools removed" definition_ref="package_kexec-tools_removed" />
diff --git a/RHEL/6/input/checks/service_mdmonitor_disabled.xml b/RHEL/6/input/checks/service_mdmonitor_disabled.xml
index a96e5ef..550707f 100644
--- a/RHEL/6/input/checks/service_mdmonitor_disabled.xml
+++ b/RHEL/6/input/checks/service_mdmonitor_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The mdmonitor service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package mdadm removed or service mdmonitor is not configured to start" operator="OR">
     <extend_definition comment="mdadm removed" definition_ref="package_mdadm_removed" />
diff --git a/RHEL/6/input/checks/service_messagebus_disabled.xml b/RHEL/6/input/checks/service_messagebus_disabled.xml
index e9364cd..bd29aaf 100644
--- a/RHEL/6/input/checks/service_messagebus_disabled.xml
+++ b/RHEL/6/input/checks/service_messagebus_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The messagebus service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package dbus removed or service messagebus is not configured to start" operator="OR">
     <extend_definition comment="dbus removed" definition_ref="package_dbus_removed" />
diff --git a/RHEL/6/input/checks/service_named_disabled.xml b/RHEL/6/input/checks/service_named_disabled.xml
index d51df60..73327b5 100644
--- a/RHEL/6/input/checks/service_named_disabled.xml
+++ b/RHEL/6/input/checks/service_named_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The named service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package bind removed or service named is not configured to start" operator="OR">
     <extend_definition comment="bind removed" definition_ref="package_bind_removed" />
diff --git a/RHEL/6/input/checks/service_netconsole_disabled.xml b/RHEL/6/input/checks/service_netconsole_disabled.xml
index 143d496..2ebc6ab 100644
--- a/RHEL/6/input/checks/service_netconsole_disabled.xml
+++ b/RHEL/6/input/checks/service_netconsole_disabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The netconsole service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20131002" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria operator="AND" comment="service netconsole is not configured to start">
       <criterion comment="netconsole runlevel 0" test_ref="test_runlevel0_netconsole" />
diff --git a/RHEL/6/input/checks/service_netfs_disabled.xml b/RHEL/6/input/checks/service_netfs_disabled.xml
index 396bb5f..231937a 100644
--- a/RHEL/6/input/checks/service_netfs_disabled.xml
+++ b/RHEL/6/input/checks/service_netfs_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The netfs service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria operator="AND" comment="service netfs is not configured to start">
       <criterion comment="netfs runlevel 0" test_ref="test_runlevel0_netfs" />
diff --git a/RHEL/6/input/checks/service_nfs_disabled.xml b/RHEL/6/input/checks/service_nfs_disabled.xml
index 15a6c81..65bf838 100644
--- a/RHEL/6/input/checks/service_nfs_disabled.xml
+++ b/RHEL/6/input/checks/service_nfs_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The nfs service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package nfs-utils removed or service nfs is not configured to start" operator="OR">
     <extend_definition comment="nfs-utils removed" definition_ref="package_nfs-utils_removed" />
diff --git a/RHEL/6/input/checks/service_nfslock_disabled.xml b/RHEL/6/input/checks/service_nfslock_disabled.xml
index 791fac4..c52463d 100644
--- a/RHEL/6/input/checks/service_nfslock_disabled.xml
+++ b/RHEL/6/input/checks/service_nfslock_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The nfslock service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package nfs-utils removed or service nfslock is not configured to start" operator="OR">
     <extend_definition comment="nfs-utils removed" definition_ref="package_nfs-utils_removed" />
diff --git a/RHEL/6/input/checks/service_ntpd_enabled.xml b/RHEL/6/input/checks/service_ntpd_enabled.xml
index 499b7ff..97797b3 100644
--- a/RHEL/6/input/checks/service_ntpd_enabled.xml
+++ b/RHEL/6/input/checks/service_ntpd_enabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The ntpd service should be enabled if possible.</description>
-      <reference source="DS" ref_id="20130918" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package ntp installed and service ntpd is configured to start" operator="AND">
     <extend_definition comment="ntp installed" definition_ref="package_ntp_installed" />
diff --git a/RHEL/6/input/checks/service_oddjobd_disabled.xml b/RHEL/6/input/checks/service_oddjobd_disabled.xml
index e6f52a1..e68eb62 100644
--- a/RHEL/6/input/checks/service_oddjobd_disabled.xml
+++ b/RHEL/6/input/checks/service_oddjobd_disabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The oddjobd service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20130918" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package oddjob removed or service oddjobd is not configured to start" operator="OR">
     <extend_definition comment="oddjob removed" definition_ref="package_oddjob_removed" />
diff --git a/RHEL/6/input/checks/service_portreserve_disabled.xml b/RHEL/6/input/checks/service_portreserve_disabled.xml
index a39c955..e7e5243 100644
--- a/RHEL/6/input/checks/service_portreserve_disabled.xml
+++ b/RHEL/6/input/checks/service_portreserve_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The portreserve service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package portreserve removed or service portreserve is not configured to start" operator="OR">
     <extend_definition comment="portreserve removed" definition_ref="package_portreserve_removed" />
diff --git a/RHEL/6/input/checks/service_postfix_enabled.xml b/RHEL/6/input/checks/service_postfix_enabled.xml
index e356a47..b0e7cc3 100644
--- a/RHEL/6/input/checks/service_postfix_enabled.xml
+++ b/RHEL/6/input/checks/service_postfix_enabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The postfix service should be enabled if possible.</description>
-      <reference source="DS" ref_id="20130918" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package postfix installed and service postfix is configured to start" operator="AND">
     <extend_definition comment="postfix installed" definition_ref="package_postfix_installed" />
diff --git a/RHEL/6/input/checks/service_psacct_enabled.xml b/RHEL/6/input/checks/service_psacct_enabled.xml
index 5871d92..74a6b3c 100644
--- a/RHEL/6/input/checks/service_psacct_enabled.xml
+++ b/RHEL/6/input/checks/service_psacct_enabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The psacct service should be enabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package psacct installed and service psacct is configured to start" operator="AND">
     <extend_definition comment="psacct installed" definition_ref="package_psacct_installed" />
diff --git a/RHEL/6/input/checks/service_qpidd_disabled.xml b/RHEL/6/input/checks/service_qpidd_disabled.xml
index f214a65..9e130a5 100644
--- a/RHEL/6/input/checks/service_qpidd_disabled.xml
+++ b/RHEL/6/input/checks/service_qpidd_disabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The qpidd service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20130918" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package qpid-cpp-server removed or service qpidd is not configured to start" operator="OR">
     <extend_definition comment="qpid-cpp-server removed" definition_ref="package_qpid-cpp-server_removed" />
diff --git a/RHEL/6/input/checks/service_quota_nld_disabled.xml b/RHEL/6/input/checks/service_quota_nld_disabled.xml
index 40a129a..ad106d6 100644
--- a/RHEL/6/input/checks/service_quota_nld_disabled.xml
+++ b/RHEL/6/input/checks/service_quota_nld_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The quota_nld service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package quota removed or service quota_nld is not configured to start" operator="OR">
     <extend_definition comment="quota removed" definition_ref="package_quota_removed" />
diff --git a/RHEL/6/input/checks/service_rdisc_disabled.xml b/RHEL/6/input/checks/service_rdisc_disabled.xml
index cb26da4..5cd2bbe 100644
--- a/RHEL/6/input/checks/service_rdisc_disabled.xml
+++ b/RHEL/6/input/checks/service_rdisc_disabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The rdisc service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20130918" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package iputils removed or service rdisc is not configured to start" operator="OR">
     <extend_definition comment="iputils removed" definition_ref="package_iputils_removed" />
diff --git a/RHEL/6/input/checks/service_restorecond_enabled.xml b/RHEL/6/input/checks/service_restorecond_enabled.xml
index 3f7fbf9..331e647 100644
--- a/RHEL/6/input/checks/service_restorecond_enabled.xml
+++ b/RHEL/6/input/checks/service_restorecond_enabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The restorecond service should be enabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package policycoreutils installed and service restorecond is configured to start" operator="AND">
     <extend_definition comment="policycoreutils installed" definition_ref="package_policycoreutils_installed" />
diff --git a/RHEL/6/input/checks/service_rhnsd_disabled.xml b/RHEL/6/input/checks/service_rhnsd_disabled.xml
index 316426b..f3b89b2 100644
--- a/RHEL/6/input/checks/service_rhnsd_disabled.xml
+++ b/RHEL/6/input/checks/service_rhnsd_disabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The rhnsd service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20131002" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package rhnsd removed or service rhnsd is not configured to start" operator="OR">
     <extend_definition comment="rhnsd removed" definition_ref="package_rhnsd_removed" />
diff --git a/RHEL/6/input/checks/service_rhsmcertd_disabled.xml b/RHEL/6/input/checks/service_rhsmcertd_disabled.xml
index e751cb1..7643695 100644
--- a/RHEL/6/input/checks/service_rhsmcertd_disabled.xml
+++ b/RHEL/6/input/checks/service_rhsmcertd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The rhsmcertd service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package subscription-manager removed or service rhsmcertd is not configured to start" operator="OR">
     <extend_definition comment="subscription-manager removed" definition_ref="package_subscription-manager_removed" />
diff --git a/RHEL/6/input/checks/service_rpcgssd_disabled.xml b/RHEL/6/input/checks/service_rpcgssd_disabled.xml
index 243c298..3dd662d 100644
--- a/RHEL/6/input/checks/service_rpcgssd_disabled.xml
+++ b/RHEL/6/input/checks/service_rpcgssd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The rpcgssd service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package nfs-utils removed or service rpcgssd is not configured to start" operator="OR">
     <extend_definition comment="nfs-utils removed" definition_ref="package_nfs-utils_removed" />
diff --git a/RHEL/6/input/checks/service_rpcidmapd_disabled.xml b/RHEL/6/input/checks/service_rpcidmapd_disabled.xml
index a035d6a..8a4cfff 100644
--- a/RHEL/6/input/checks/service_rpcidmapd_disabled.xml
+++ b/RHEL/6/input/checks/service_rpcidmapd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The rpcidmapd service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package nfs-utils removed or service rpcidmapd is not configured to start" operator="OR">
     <extend_definition comment="nfs-utils removed" definition_ref="package_nfs-utils_removed" />
diff --git a/RHEL/6/input/checks/service_rpcsvcgssd_disabled.xml b/RHEL/6/input/checks/service_rpcsvcgssd_disabled.xml
index e47a1b7..121013e 100644
--- a/RHEL/6/input/checks/service_rpcsvcgssd_disabled.xml
+++ b/RHEL/6/input/checks/service_rpcsvcgssd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The rpcsvcgssd service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package nfs-utils removed or service rpcsvcgssd is not configured to start" operator="OR">
     <extend_definition comment="nfs-utils removed" definition_ref="package_nfs-utils_removed" />
diff --git a/RHEL/6/input/checks/service_rsyslog_enabled.xml b/RHEL/6/input/checks/service_rsyslog_enabled.xml
index fad53a2..32adb96 100644
--- a/RHEL/6/input/checks/service_rsyslog_enabled.xml
+++ b/RHEL/6/input/checks/service_rsyslog_enabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The rsyslog service should be enabled if possible.</description>
-      <reference source="DS" ref_id="20131002" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria comment="package rsyslog installed and service rsyslog is configured to start" operator="AND">
     <extend_definition comment="rsyslog installed" definition_ref="package_rsyslog_installed" />
diff --git a/RHEL/6/input/checks/service_saslauthd_disabled.xml b/RHEL/6/input/checks/service_saslauthd_disabled.xml
index 9d89b22..73d2541 100644
--- a/RHEL/6/input/checks/service_saslauthd_disabled.xml
+++ b/RHEL/6/input/checks/service_saslauthd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The saslauthd service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package cyrus-sasl removed or service saslauthd is not configured to start" operator="OR">
     <extend_definition comment="cyrus-sasl removed" definition_ref="package_cyrus-sasl_removed" />
diff --git a/RHEL/6/input/checks/service_smartd_disabled.xml b/RHEL/6/input/checks/service_smartd_disabled.xml
index b515b9d..a00bf3a 100644
--- a/RHEL/6/input/checks/service_smartd_disabled.xml
+++ b/RHEL/6/input/checks/service_smartd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The smartd service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package smartmontools removed or service smartd is not configured to start" operator="OR">
     <extend_definition comment="smartmontools removed" definition_ref="package_smartmontools_removed" />
diff --git a/RHEL/6/input/checks/service_smb_disabled.xml b/RHEL/6/input/checks/service_smb_disabled.xml
index 3ae7140..74ab692 100644
--- a/RHEL/6/input/checks/service_smb_disabled.xml
+++ b/RHEL/6/input/checks/service_smb_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The smb service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
     <criteria operator="AND" comment="service smb is not configured to start">
       <criterion comment="smb runlevel 0" test_ref="test_runlevel0_smb" />
diff --git a/RHEL/6/input/checks/service_snmpd_disabled.xml b/RHEL/6/input/checks/service_snmpd_disabled.xml
index cbb93d6..7b13005 100644
--- a/RHEL/6/input/checks/service_snmpd_disabled.xml
+++ b/RHEL/6/input/checks/service_snmpd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The snmpd service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package net-snmp removed or service snmpd is not configured to start" operator="OR">
     <extend_definition comment="net-snmp removed" definition_ref="package_net-snmp_removed" />
diff --git a/RHEL/6/input/checks/service_squid_disabled.xml b/RHEL/6/input/checks/service_squid_disabled.xml
index 894cab5..8b03d4b 100644
--- a/RHEL/6/input/checks/service_squid_disabled.xml
+++ b/RHEL/6/input/checks/service_squid_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The squid service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package squid removed or service squid is not configured to start" operator="OR">
     <extend_definition comment="squid removed" definition_ref="package_squid_removed" />
diff --git a/RHEL/6/input/checks/service_sshd_disabled.xml b/RHEL/6/input/checks/service_sshd_disabled.xml
index 23cba8d..bf0ce8d 100644
--- a/RHEL/6/input/checks/service_sshd_disabled.xml
+++ b/RHEL/6/input/checks/service_sshd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The sshd service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package openssh-server removed or service sshd is not configured to start" operator="OR">
     <extend_definition comment="openssh-server removed" definition_ref="package_openssh-server_removed" />
diff --git a/RHEL/6/input/checks/service_sysstat_disabled.xml b/RHEL/6/input/checks/service_sysstat_disabled.xml
index 937eb0b..8ea434e 100644
--- a/RHEL/6/input/checks/service_sysstat_disabled.xml
+++ b/RHEL/6/input/checks/service_sysstat_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The sysstat service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package sysstat removed or service sysstat is not configured to start" operator="OR">
     <extend_definition comment="sysstat removed" definition_ref="package_sysstat_removed" />
diff --git a/RHEL/6/input/checks/service_tftp_disabled.xml b/RHEL/6/input/checks/service_tftp_disabled.xml
index 73f7b5b..4afa8c8 100644
--- a/RHEL/6/input/checks/service_tftp_disabled.xml
+++ b/RHEL/6/input/checks/service_tftp_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The tftp service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package tftp-server removed or service tftp is not configured to start" operator="OR">
     <extend_definition comment="tftp-server removed" definition_ref="package_tftp-server_removed" />
diff --git a/RHEL/6/input/checks/service_vsftpd_disabled.xml b/RHEL/6/input/checks/service_vsftpd_disabled.xml
index 8702263..5783f05 100644
--- a/RHEL/6/input/checks/service_vsftpd_disabled.xml
+++ b/RHEL/6/input/checks/service_vsftpd_disabled.xml
@@ -8,6 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The vsftpd service should be disabled if possible.</description>
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package vsftpd removed or service vsftpd is not configured to start" operator="OR">
     <extend_definition comment="vsftpd removed" definition_ref="package_vsftpd_removed" />
diff --git a/RHEL/6/input/checks/service_xinetd_disabled.xml b/RHEL/6/input/checks/service_xinetd_disabled.xml
index c162e23..c5284c0 100644
--- a/RHEL/6/input/checks/service_xinetd_disabled.xml
+++ b/RHEL/6/input/checks/service_xinetd_disabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The xinetd service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20131018" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package xinetd removed or service xinetd is not configured to start" operator="OR">
     <extend_definition comment="xinetd removed" definition_ref="package_xinetd_removed" />
diff --git a/RHEL/6/input/checks/service_ypbind_disabled.xml b/RHEL/6/input/checks/service_ypbind_disabled.xml
index e32cfa5..ab40c8c 100644
--- a/RHEL/6/input/checks/service_ypbind_disabled.xml
+++ b/RHEL/6/input/checks/service_ypbind_disabled.xml
@@ -8,7 +8,7 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>The ypbind service should be disabled if possible.</description>
-      <reference source="DS" ref_id="20130918" ref_url="test_attestation" />
+      <reference source="swells" ref_id="20140417" ref_url="test_attestation" />
     </metadata>
    <criteria comment="package ypbind removed or service ypbind is not configured to start" operator="OR">
     <extend_definition comment="ypbind removed" definition_ref="package_ypbind_removed" />
-- 
1.7.1



More information about the scap-security-guide mailing list