[PATCH 1/3] [bugfix] - disable_host_auth OVAL false positive

Shawn Wells shawn at redhat.com
Tue Aug 5 18:39:31 UTC 2014


On 8/5/14, 2:36 PM, Gabe Alford wrote:
> Got it. So if the default behavior is disabled, then the scan passes. 
> Ignore this patch and the disable_rhosts patch then.
>
General question though:  Are sites failing manual checks by IV&E-type 
staff if these things are not explicitly configured? Technically the 
OCIL should highlight failure conditions, but we could look at 
elaborating the rule descriptions to reenforce such things are default 
behaviors (and thus need not be explicitly configured).


More information about the scap-security-guide mailing list