[PATCH 1/3] [bugfix] - disable_host_auth OVAL false positive

Gabe Alford redhatrises at gmail.com
Wed Aug 6 13:09:18 UTC 2014


They are using the prose guides. Looking at the CTP tables for the the
RHEL6 stig, the language for default values may also need to be stronger or
reworded as well.


On Tue, Aug 5, 2014 at 4:55 PM, Shawn Wells <shawn at redhat.com> wrote:

>
> On 8/5/14, 6:54 PM, Shawn Wells wrote:
>
>>
>> On 8/5/14, 2:57 PM, Gabe Alford wrote:
>>
>>> Elaborating the rule descriptions to reenforce default behaviors would
>>> be very beneficial at my sites at least. The manual checks are being failed
>>> by the IV&E-type staff if disabled settings are not explicitly configured
>>> as they either don't understand that the default configuration settings are
>>> disabled or they really like having the explicit configuration settings.
>>>
>>
>> How is the guide being used? Are they reading through the prose guide
>> (rhel6-guide.html), or using one of the CTP tables (e.g.
>> table-rhel6-stig.html)?
>>
>
> Part of the reason for the question: the prose guides contain *all* rules,
> whereas the tables reflect only a single profile.
>
> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140806/a2450b39/attachment.html>


More information about the scap-security-guide mailing list