[PATCH 1/3] [bugfix] - disable_host_auth OVAL false positive
Shawn Wells
shawn at redhat.com
Tue Aug 5 22:55:29 UTC 2014
On 8/5/14, 6:54 PM, Shawn Wells wrote:
>
> On 8/5/14, 2:57 PM, Gabe Alford wrote:
>> Elaborating the rule descriptions to reenforce default behaviors
>> would be very beneficial at my sites at least. The manual checks are
>> being failed by the IV&E-type staff if disabled settings are not
>> explicitly configured as they either don't understand that the
>> default configuration settings are disabled or they really like
>> having the explicit configuration settings.
>
> How is the guide being used? Are they reading through the prose guide
> (rhel6-guide.html), or using one of the CTP tables (e.g.
> table-rhel6-stig.html)?
Part of the reason for the question: the prose guides contain *all*
rules, whereas the tables reflect only a single profile.
More information about the scap-security-guide
mailing list