[PATCH] [RHEL/6] rsyslog_nolisten + system/logging.xml changes

Jan Lieskovsky jlieskov at redhat.com
Mon Apr 28 12:31:28 UTC 2014


----- Original Message -----
> From: "Shawn Wells" <shawn at redhat.com>
> Sent: Friday, April 18, 2014 6:04:21 AM
> 
> On 4/7/14, 7:30 AM, Jan Lieskovsky wrote:
> 
> * checks/rsyslog_nolisten.xml:
> 
> When checking /etc/rsyslog.conf that there is none of
> ($UDPServerRun | $InputTCPServerRun | $InputRELPServerRun)
> directives present, check also their versions possibly
> prefixed with starting whitespace characters (otherwise
> we can report system is safe wrt to this check, when it
> actually wasn't).
> 
> * RHEL/6/input/system/logging.xml
> 
> Use $ModLoad imtcp (as stated in manual page) rather than
> $ModLoad imtcp.so form when checking for loaded UDP / TCP / RELP
> modules. Also, fix typo in the UDP directive (there's no such
> $InputUDPServerRun rsyslogd option).
> 
> * RHEL/7/input/system/logging.xml
> 
> Changes same as in RHEL/6's case.
> 
> Please review.
> 
> Thank you && Regards, Jan.
> --
> Jan iankko Lieskovsky / Red Hat Security Technologies Team
..
> 
> Yet another that slipped through the cracks.
> 
> Ack

Thanks, Shawn. Pushed to master.

> 
> Feel free to move the OVAL to shared/

Will submit another patch performing just this.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team


More information about the scap-security-guide mailing list