[PATCH 1/3] [bugfix] - disable_host_auth OVAL false positive

Shawn Wells shawn at redhat.com
Tue Aug 5 22:55:29 UTC 2014


On 8/5/14, 6:54 PM, Shawn Wells wrote:
>
> On 8/5/14, 2:57 PM, Gabe Alford wrote:
>> Elaborating the rule descriptions to reenforce default behaviors 
>> would be very beneficial at my sites at least. The manual checks are 
>> being failed by the IV&E-type staff if disabled settings are not 
>> explicitly configured as they either don't understand that the 
>> default configuration settings are disabled or they really like 
>> having the explicit configuration settings.
>
> How is the guide being used? Are they reading through the prose guide 
> (rhel6-guide.html), or using one of the CTP tables (e.g. 
> table-rhel6-stig.html)?

Part of the reason for the question: the prose guides contain *all* 
rules, whereas the tables reflect only a single profile.


More information about the scap-security-guide mailing list