[PATCH] correct several STIG/SSG mappings
Maura Dailey
maura at eclipse.ncsc.mil
Fri Apr 25 18:42:02 UTC 2014
Leland,
Here is another of the promised followups to your hanging patch
submissions. This patch appears to have been partially applied, perhaps
by a later patchset from another party, and I wanted to follow up with
you to see if there are any hanging ruleid name changes in your queue.
Upon careful examination, in the file RHEL/6/auxilary/stig_overlay.xml,
the following ownerids had their ruleids renamed to the values you
suggested:
- RHEL-06-000032
- RHEL-06-000099
- RHEL-06-000342
- RHEL-06-000343
- RHEL-06-000344
- RHEL-06-000345
The following was not:
- RHEL-06-000163
If RHEL-06-000163 should still be updated to read "nonselected" as its
ruleid, let me know, and I will create a small patch. Here are the
relevant overlay lines for reference:
<overlay owner="disastig"
ruleid="configure_auditd_admin_space_left_action"
ownerid="RHEL-06-000163" disa="1343" severity="medium">
<title>The audit system must switch the system to single-user
mode when available audit storage volume becomes dangerously low.</title>
</overlay>
- Maura Dailey
On 11/20/2013 03:10 PM, Steinke, Leland J Sr CTR DISA FSO (US) wrote:
>>> Would it be simpler to remove the associated XCCDF rules from the STIG
>>> profile?
>> I actually removed them for a while, but put them back in. At this
>> point, the "selected" and "not selected" findings are indicated by the
>> presence or absence of the VMS identifiers, respectively.
> Ack?
>
> Thanks,
> Leland
> --
> Leland Steinke, Security+
> DISA FSO Technical Support Contractor
> tapestry technologies, Inc
> 717-267-5797 (DSN 570)
> leland.j.steinke.ctr at mail.mil (gov't)
> lsteinke at tapestrytech.com (com'l)
>
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140425/2cbb9e32/attachment.html>
More information about the scap-security-guide
mailing list