[PATCH] RHEL7 systemd support

Jan Lieskovsky jlieskov at redhat.com
Mon Feb 24 13:53:12 UTC 2014


Thank you, Maura. Another well desired change. I can dedicate
time slot for testing this proposal. But can you send the patch
in form of an attachment? From the form below I am unable to
determine, how the changes actually looked like.

Or does this refer to changes made on some your private repository?
How we can access not just the list of changed files, but the actual
changes / diffed content too?

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team

----- Original Message -----
> From: "Maura Dailey" <maura at eclipse.ncsc.mil>
> To: scap-security-guide at lists.fedorahosted.org
> Sent: Saturday, February 22, 2014 12:32:34 AM
> Subject: [PATCH] RHEL7 systemd support
> 
> Primarily, this is to add systemd support to RHEL 7. I borrowed a little from
> the old, a little from the Fedora project, and added some glue. I also made
> a first pass at updating kernel module, package, and service names to match
> what I've seen so far in the RHEL 7 beta.
> 
> Maura Dailey (1):
>   Adding new templates and new scripts to support RHEL 7's switch to
>     systemd. Also, adjusted the service and package names to reflect
>     the currently available items in the RHEL 7 beta.
> 
>  .../input/checks/kernel_module_cramfs_disabled.xml |   31 ++++++
>  .../7/input/checks/kernel_module_dccp_disabled.xml |   31 ++++++
>  .../input/checks/kernel_module_jffs2_disabled.xml  |   31 ++++++
>  RHEL/7/input/checks/kernel_module_rds_disabled.xml |   31 ++++++
>  .../7/input/checks/kernel_module_sctp_disabled.xml |   31 ++++++
>  .../checks/kernel_module_squashfs_disabled.xml     |   31 ++++++
>  RHEL/7/input/checks/kernel_module_udf_disabled.xml |   31 ++++++
>  .../checks/kernel_module_usb-storage_disabled.xml  |   31 ++++++
>  RHEL/7/input/checks/package_abrt_removed.xml       |   26 +++++
>  RHEL/7/input/checks/package_aide_installed.sh      |    1 +
>  RHEL/7/input/checks/package_at_removed.xml         |   26 +++++
>  RHEL/7/input/checks/package_audit_installed.sh     |    1 +
>  RHEL/7/input/checks/package_audit_installed.xml    |   26 +++++
>  RHEL/7/input/checks/package_bind_removed.xml       |   26 +++++
>  RHEL/7/input/checks/package_cpuspeed_removed.xml   |   26 +++++
>  RHEL/7/input/checks/package_cronie_installed.sh    |    1 +
>  RHEL/7/input/checks/package_cronie_installed.xml   |   26 +++++
>  RHEL/7/input/checks/package_cups_removed.xml       |   26 +++++
>  RHEL/7/input/checks/package_cyrus-sasl_removed.xml |   26 +++++
>  RHEL/7/input/checks/package_dbus_removed.xml       |   26 +++++
>  RHEL/7/input/checks/package_dconf_installed.sh     |    1 +
>  RHEL/7/input/checks/package_dconf_installed.xml    |   26 +++++
>  RHEL/7/input/checks/package_dhcp_removed.xml       |   26 +++++
>  RHEL/7/input/checks/package_dhcpd_removed.xml      |   26 +++++
>  RHEL/7/input/checks/package_dovecot_removed.xml    |   26 +++++
>  RHEL/7/input/checks/package_hal_removed.xml        |   26 +++++
>  RHEL/7/input/checks/package_httpd_removed.xml      |   26 +++++
>  .../checks/package_iptables-services_installed.sh  |    1 +
>  .../checks/package_iptables-services_installed.xml |   26 +++++
>  RHEL/7/input/checks/package_iptables_installed.sh  |    1 +
>  RHEL/7/input/checks/package_iptables_installed.xml |   26 +++++
>  RHEL/7/input/checks/package_iputils_removed.xml    |   26 +++++
>  .../7/input/checks/package_irqbalance_installed.sh |    1 +
>  .../input/checks/package_irqbalance_installed.xml  |   26 +++++
>  .../7/input/checks/package_kexec-tools_removed.xml |   26 +++++
>  RHEL/7/input/checks/package_libcgroup_removed.xml  |   26 +++++
>  RHEL/7/input/checks/package_mdadm_removed.xml      |   26 +++++
>  RHEL/7/input/checks/package_net-snmp_removed.xml   |   26 +++++
>  RHEL/7/input/checks/package_nfs-utils_removed.xml  |   26 +++++
>  RHEL/7/input/checks/package_ntp_installed.sh       |    1 +
>  RHEL/7/input/checks/package_ntp_installed.xml      |   26 +++++
>  RHEL/7/input/checks/package_oddjob_removed.xml     |   26 +++++
>  .../checks/package_openldap-servers_removed.xml    |   26 +++++
>  RHEL/7/input/checks/package_pam_ldap_removed.xml   |   26 +++++
>  .../checks/package_policycoreutils_installed.sh    |    1 +
>  .../checks/package_policycoreutils_installed.xml   |   26 +++++
>  .../7/input/checks/package_portreserve_removed.xml |   26 +++++
>  RHEL/7/input/checks/package_postfix_installed.sh   |    1 +
>  RHEL/7/input/checks/package_postfix_installed.xml  |   26 +++++
>  RHEL/7/input/checks/package_psacct_installed.sh    |    1 +
>  RHEL/7/input/checks/package_psacct_installed.xml   |   26 +++++
>  .../checks/package_qpid-cpp-server_removed.xml     |   26 +++++
>  RHEL/7/input/checks/package_quota_removed.xml      |   26 +++++
>  RHEL/7/input/checks/package_rhnsd_removed.xml      |   26 +++++
>  RHEL/7/input/checks/package_rsh-server_removed.xml |   26 +++++
>  RHEL/7/input/checks/package_rsyslog_installed.sh   |    1 +
>  RHEL/7/input/checks/package_rsyslog_installed.xml  |   26 +++++
>  .../input/checks/package_samba-common_removed.xml  |   26 +++++
>  RHEL/7/input/checks/package_screen_installed.sh    |    1 +
>  RHEL/7/input/checks/package_screen_installed.xml   |   26 +++++
>  RHEL/7/input/checks/package_sendmail_removed.xml   |   26 +++++
>  .../input/checks/package_smartmontools_removed.xml |   26 +++++
>  RHEL/7/input/checks/package_squid_removed.xml      |   26 +++++
>  .../package_subscription-manager_removed.xml       |   26 +++++
>  RHEL/7/input/checks/package_sysstat_removed.xml    |   26 +++++
>  .../7/input/checks/package_talk-server_removed.xml |   26 +++++
>  .../input/checks/package_telnet-server_removed.xml |   26 +++++
>  .../7/input/checks/package_tftp-server_removed.xml |   26 +++++
>  RHEL/7/input/checks/package_vsftpd_installed.sh    |    1 +
>  RHEL/7/input/checks/package_vsftpd_installed.xml   |   26 +++++
>  RHEL/7/input/checks/package_vsftpd_removed.xml     |   26 +++++
>  RHEL/7/input/checks/package_xinetd_removed.xml     |   26 +++++
>  .../package_xorg-x11-server-common_removed.xml     |   26 +++++
>  RHEL/7/input/checks/package_ypbind_removed.xml     |   26 +++++
>  RHEL/7/input/checks/package_ypserv_removed.xml     |   26 +++++
>  RHEL/7/input/checks/service_abrtd_disabled.xml     |   33 +++++++
>  RHEL/7/input/checks/service_acpid_disabled.xml     |   32 +++++++
>  RHEL/7/input/checks/service_atd_disabled.xml       |   33 +++++++
>  RHEL/7/input/checks/service_auditd_enabled.xml     |   33 +++++++
>  RHEL/7/input/checks/service_autofs_disabled.xml    |   32 +++++++
>  .../input/checks/service_avahi-daemon_disabled.xml |   32 +++++++
>  RHEL/7/input/checks/service_bluetooth_disabled.xml |   32 +++++++
>  .../7/input/checks/service_certmonger_disabled.xml |   32 +++++++
>  RHEL/7/input/checks/service_cgconfig_disabled.xml  |   33 +++++++
>  RHEL/7/input/checks/service_crond_enabled.xml      |   33 +++++++
>  RHEL/7/input/checks/service_cups_disabled.xml      |   33 +++++++
>  RHEL/7/input/checks/service_dhcpd_disabled.xml     |   33 +++++++
>  RHEL/7/input/checks/service_dovecot_disabled.xml   |   33 +++++++
>  RHEL/7/input/checks/service_httpd_disabled.xml     |   33 +++++++
>  RHEL/7/input/checks/service_ip6tables_enabled.xml  |   33 +++++++
>  RHEL/7/input/checks/service_iptables_enabled.xml   |   33 +++++++
>  RHEL/7/input/checks/service_irqbalance_enabled.xml |   33 +++++++
>  RHEL/7/input/checks/service_kdump_disabled.xml     |   33 +++++++
>  RHEL/7/input/checks/service_mdmonitor_disabled.xml |   33 +++++++
>  RHEL/7/input/checks/service_named_disabled.xml     |   33 +++++++
>  RHEL/7/input/checks/service_nfs-lock_disabled.xml  |   33 +++++++
>  .../7/input/checks/service_nfs-server_disabled.xml |   33 +++++++
>  RHEL/7/input/checks/service_ntpd_enabled.xml       |   33 +++++++
>  RHEL/7/input/checks/service_oddjobd_disabled.xml   |   33 +++++++
>  .../input/checks/service_portreserve_disabled.xml  |   33 +++++++
>  RHEL/7/input/checks/service_postfix_enabled.xml    |   33 +++++++
>  RHEL/7/input/checks/service_psacct_enabled.xml     |   33 +++++++
>  RHEL/7/input/checks/service_qpidd_disabled.xml     |   33 +++++++
>  RHEL/7/input/checks/service_quotaon_disabled.xml   |   32 +++++++
>  RHEL/7/input/checks/service_rdisc_disabled.xml     |   33 +++++++
>  RHEL/7/input/checks/service_rhnsd_disabled.xml     |   99
>  ++++++++++++++++++++
>  RHEL/7/input/checks/service_rhsmcertd_disabled.xml |   33 +++++++
>  RHEL/7/input/checks/service_rpcgssd_disabled.xml   |   33 +++++++
>  RHEL/7/input/checks/service_rpcidmapd_disabled.xml |   33 +++++++
>  .../7/input/checks/service_rpcsvcgssd_disabled.xml |   33 +++++++
>  RHEL/7/input/checks/service_rsyslog_enabled.xml    |   32 +++++++
>  RHEL/7/input/checks/service_saslauthd_disabled.xml |   33 +++++++
>  RHEL/7/input/checks/service_smartd_disabled.xml    |   33 +++++++
>  RHEL/7/input/checks/service_smb_disabled.xml       |   32 +++++++
>  RHEL/7/input/checks/service_snmpd_disabled.xml     |   33 +++++++
>  RHEL/7/input/checks/service_squid_disabled.xml     |   33 +++++++
>  RHEL/7/input/checks/service_sshd_disabled.xml      |   25 ++---
>  RHEL/7/input/checks/service_sysstat_disabled.xml   |   33 +++++++
>  RHEL/7/input/checks/service_tftp_disabled.xml      |   33 +++++++
>  RHEL/7/input/checks/service_vsftpd_disabled.xml    |   33 +++++++
>  RHEL/7/input/checks/service_xinetd_disabled.xml    |   33 +++++++
>  RHEL/7/input/checks/service_ypbind_disabled.xml    |   33 +++++++
>  RHEL/7/input/checks/templates/Makefile             |   24 +++++
>  .../templates/create_kernel_modules_disabled.py    |   40 ++++++++
>  .../checks/templates/create_package_installed.py   |   46 +++++++++
>  .../checks/templates/create_package_removed.py     |   39 ++++++++
>  .../templates/create_services_systemd_disabled.py  |   44 +++++++++
>  .../templates/create_services_systemd_enabled.py   |   44 +++++++++
>  .../templates/create_services_sysv_disabled.py     |   45 +++++++++
>  .../checks/templates/kernel_modules_disabled.csv   |    8 ++
>  .../output/kernel_module_cramfs_disabled.xml       |   31 ++++++
>  .../output/kernel_module_dccp_disabled.xml         |   31 ++++++
>  .../output/kernel_module_jffs2_disabled.xml        |   31 ++++++
>  .../output/kernel_module_rds_disabled.xml          |   31 ++++++
>  .../output/kernel_module_sctp_disabled.xml         |   31 ++++++
>  .../output/kernel_module_squashfs_disabled.xml     |   31 ++++++
>  .../output/kernel_module_udf_disabled.xml          |   31 ++++++
>  .../output/kernel_module_usb-storage_disabled.xml  |   31 ++++++
>  .../templates/output/package_abrt_removed.xml      |   26 +++++
>  .../templates/output/package_aide_installed.sh     |    1 +
>  .../templates/output/package_aide_installed.xml    |   26 +++++
>  .../checks/templates/output/package_at_removed.xml |   26 +++++
>  .../templates/output/package_audit_installed.sh    |    1 +
>  .../templates/output/package_audit_installed.xml   |   26 +++++
>  .../templates/output/package_bind_removed.xml      |   26 +++++
>  .../templates/output/package_cpuspeed_removed.xml  |   26 +++++
>  .../templates/output/package_cronie_installed.sh   |    1 +
>  .../templates/output/package_cronie_installed.xml  |   26 +++++
>  .../templates/output/package_cups_removed.xml      |   26 +++++
>  .../output/package_cyrus-sasl_removed.xml          |   26 +++++
>  .../templates/output/package_dbus_removed.xml      |   26 +++++
>  .../templates/output/package_dconf_installed.sh    |    1 +
>  .../templates/output/package_dconf_installed.xml   |   26 +++++
>  .../templates/output/package_dhcp_removed.xml      |   26 +++++
>  .../templates/output/package_dhcpd_removed.xml     |   26 +++++
>  .../templates/output/package_dovecot_removed.xml   |   26 +++++
>  .../templates/output/package_hal_removed.xml       |   26 +++++
>  .../templates/output/package_httpd_removed.xml     |   26 +++++
>  .../output/package_iptables-services_installed.sh  |    1 +
>  .../output/package_iptables-services_installed.xml |   26 +++++
>  .../templates/output/package_iptables_installed.sh |    1 +
>  .../output/package_iptables_installed.xml          |   26 +++++
>  .../templates/output/package_iputils_removed.xml   |   26 +++++
>  .../output/package_irqbalance_installed.sh         |    1 +
>  .../output/package_irqbalance_installed.xml        |   26 +++++
>  .../output/package_kexec-tools_removed.xml         |   26 +++++
>  .../templates/output/package_libcgroup_removed.xml |   26 +++++
>  .../templates/output/package_mdadm_removed.xml     |   26 +++++
>  .../templates/output/package_net-snmp_removed.xml  |   26 +++++
>  .../templates/output/package_nfs-utils_removed.xml |   26 +++++
>  .../templates/output/package_ntp_installed.sh      |    1 +
>  .../templates/output/package_ntp_installed.xml     |   26 +++++
>  .../templates/output/package_oddjob_removed.xml    |   26 +++++
>  .../output/package_openldap-servers_removed.xml    |   26 +++++
>  .../output/package_openssh-server_removed.xml      |   26 +++++
>  .../templates/output/package_pam_ldap_removed.xml  |   26 +++++
>  .../output/package_policycoreutils_installed.sh    |    1 +
>  .../output/package_policycoreutils_installed.xml   |   26 +++++
>  .../output/package_portreserve_removed.xml         |   26 +++++
>  .../templates/output/package_postfix_installed.sh  |    1 +
>  .../templates/output/package_postfix_installed.xml |   26 +++++
>  .../templates/output/package_psacct_installed.sh   |    1 +
>  .../templates/output/package_psacct_installed.xml  |   26 +++++
>  .../output/package_qpid-cpp-server_removed.xml     |   26 +++++
>  .../templates/output/package_quota_removed.xml     |   26 +++++
>  .../templates/output/package_rhnsd_removed.xml     |   26 +++++
>  .../output/package_rsh-server_removed.xml          |   26 +++++
>  .../templates/output/package_rsyslog_installed.sh  |    1 +
>  .../templates/output/package_rsyslog_installed.xml |   26 +++++
>  .../output/package_samba-common_removed.xml        |   26 +++++
>  .../templates/output/package_screen_installed.sh   |    1 +
>  .../templates/output/package_screen_installed.xml  |   26 +++++
>  .../templates/output/package_sendmail_removed.xml  |   26 +++++
>  .../output/package_smartmontools_removed.xml       |   26 +++++
>  .../templates/output/package_squid_removed.xml     |   26 +++++
>  .../package_subscription-manager_removed.xml       |   26 +++++
>  .../templates/output/package_sysstat_removed.xml   |   26 +++++
>  .../output/package_talk-server_removed.xml         |   26 +++++
>  .../output/package_telnet-server_removed.xml       |   26 +++++
>  .../output/package_tftp-server_removed.xml         |   26 +++++
>  .../templates/output/package_vsftpd_installed.sh   |    1 +
>  .../templates/output/package_vsftpd_installed.xml  |   26 +++++
>  .../templates/output/package_vsftpd_removed.xml    |   26 +++++
>  .../templates/output/package_xinetd_removed.xml    |   26 +++++
>  .../package_xorg-x11-server-common_removed.xml     |   26 +++++
>  .../templates/output/package_ypbind_removed.xml    |   26 +++++
>  .../templates/output/package_ypserv_removed.xml    |   26 +++++
>  .../templates/output/service_abrtd_disabled.xml    |   33 +++++++
>  .../templates/output/service_acpid_disabled.xml    |   32 +++++++
>  .../templates/output/service_atd_disabled.xml      |   33 +++++++
>  .../templates/output/service_auditd_enabled.xml    |   33 +++++++
>  .../templates/output/service_autofs_disabled.xml   |   32 +++++++
>  .../output/service_avahi-daemon_disabled.xml       |   32 +++++++
>  .../output/service_bluetooth_disabled.xml          |   32 +++++++
>  .../output/service_certmonger_disabled.xml         |   32 +++++++
>  .../templates/output/service_cgconfig_disabled.xml |   33 +++++++
>  .../templates/output/service_crond_enabled.xml     |   33 +++++++
>  .../templates/output/service_cups_disabled.xml     |   33 +++++++
>  .../templates/output/service_dhcpd_disabled.xml    |   33 +++++++
>  .../templates/output/service_dovecot_disabled.xml  |   33 +++++++
>  .../templates/output/service_httpd_disabled.xml    |   33 +++++++
>  .../templates/output/service_ip6tables_enabled.xml |   33 +++++++
>  .../templates/output/service_iptables_enabled.xml  |   33 +++++++
>  .../output/service_irqbalance_enabled.xml          |   33 +++++++
>  .../templates/output/service_kdump_disabled.xml    |   33 +++++++
>  .../output/service_mdmonitor_disabled.xml          |   33 +++++++
>  .../templates/output/service_named_disabled.xml    |   33 +++++++
>  .../templates/output/service_nfs-lock_disabled.xml |   33 +++++++
>  .../output/service_nfs-server_disabled.xml         |   33 +++++++
>  .../templates/output/service_ntpd_enabled.xml      |   33 +++++++
>  .../templates/output/service_oddjobd_disabled.xml  |   33 +++++++
>  .../output/service_portreserve_disabled.xml        |   33 +++++++
>  .../templates/output/service_postfix_enabled.xml   |   33 +++++++
>  .../templates/output/service_psacct_enabled.xml    |   33 +++++++
>  .../templates/output/service_qpidd_disabled.xml    |   33 +++++++
>  .../templates/output/service_quotaon_disabled.xml  |   32 +++++++
>  .../templates/output/service_rdisc_disabled.xml    |   33 +++++++
>  .../templates/output/service_rhnsd_disabled.xml    |   99
>  ++++++++++++++++++++
>  .../output/service_rhsmcertd_disabled.xml          |   33 +++++++
>  .../templates/output/service_rpcgssd_disabled.xml  |   33 +++++++
>  .../output/service_rpcidmapd_disabled.xml          |   33 +++++++
>  .../output/service_rpcsvcgssd_disabled.xml         |   33 +++++++
>  .../templates/output/service_rsyslog_enabled.xml   |   32 +++++++
>  .../output/service_saslauthd_disabled.xml          |   33 +++++++
>  .../templates/output/service_smartd_disabled.xml   |   33 +++++++
>  .../templates/output/service_smb_disabled.xml      |   32 +++++++
>  .../templates/output/service_snmpd_disabled.xml    |   33 +++++++
>  .../templates/output/service_squid_disabled.xml    |   33 +++++++
>  .../templates/output/service_sshd_disabled.xml     |   33 +++++++
>  .../templates/output/service_sysstat_disabled.xml  |   33 +++++++
>  .../templates/output/service_tftp_disabled.xml     |   33 +++++++
>  .../templates/output/service_vsftpd_disabled.xml   |   33 +++++++
>  .../templates/output/service_xinetd_disabled.xml   |   33 +++++++
>  .../templates/output/service_ypbind_disabled.xml   |   33 +++++++
>  .../input/checks/templates/packages_installed.csv  |    5 +-
>  RHEL/7/input/checks/templates/packages_removed.csv |   41 ++++++++
>  .../checks/templates/services_systemd_disabled.csv |   37 +++++++
>  .../checks/templates/services_systemd_enabled.csv  |    9 ++
>  .../checks/templates/services_sysv_disabled.csv    |    1 +
>  .../templates/template_BASH_package_installed      |    1 +
>  .../templates/template_OVAL_package_installed      |   26 +++++
>  .../templates/template_kernel_module_disabled      |   31 ++++++
>  .../checks/templates/template_package_removed      |   26 +++++
>  .../templates/template_service_systemd_disabled    |   33 +++++++
>  .../templates/template_service_systemd_enabled     |   33 +++++++
>  .../templates/template_service_sysv_disabled       |   99
>  ++++++++++++++++++++
>  RHEL/7/input/fixes/bash/package_dconf_installed.sh |    1 +
>  .../bash/package_iptables-services_installed.sh    |    1 +
>  RHEL/7/transforms/idtranslate.pyc                  |  Bin 5149 -> 5160 bytes
>  shared/oval/package_aide_installed.xml             |    3 +-
>  shared/oval/package_openssh-server_removed.xml     |    1 -
>  271 files changed, 7160 insertions(+), 20 deletions(-)
>  create mode 100644 RHEL/7/input/checks/kernel_module_cramfs_disabled.xml
>  create mode 100644 RHEL/7/input/checks/kernel_module_dccp_disabled.xml
>  create mode 100644 RHEL/7/input/checks/kernel_module_jffs2_disabled.xml
>  create mode 100644 RHEL/7/input/checks/kernel_module_rds_disabled.xml
>  create mode 100644 RHEL/7/input/checks/kernel_module_sctp_disabled.xml
>  create mode 100644 RHEL/7/input/checks/kernel_module_squashfs_disabled.xml
>  create mode 100644 RHEL/7/input/checks/kernel_module_udf_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/kernel_module_usb-storage_disabled.xml
>  create mode 100644 RHEL/7/input/checks/package_abrt_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_aide_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_at_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_audit_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_audit_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_bind_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_cpuspeed_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_cronie_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_cronie_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_cups_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_cyrus-sasl_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_dbus_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_dconf_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_dconf_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_dhcp_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_dhcpd_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_dovecot_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_hal_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_httpd_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/package_iptables-services_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/package_iptables-services_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_iptables_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_iptables_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_iputils_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_irqbalance_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_irqbalance_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_kexec-tools_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_libcgroup_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_mdadm_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_net-snmp_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_nfs-utils_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_ntp_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_ntp_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_oddjob_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_openldap-servers_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_pam_ldap_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_policycoreutils_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_policycoreutils_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_portreserve_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_postfix_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_postfix_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_psacct_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_psacct_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_qpid-cpp-server_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_quota_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_rhnsd_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_rsh-server_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_rsyslog_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_rsyslog_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_samba-common_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_screen_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_screen_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_sendmail_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_smartmontools_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_squid_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/package_subscription-manager_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_sysstat_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_talk-server_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_telnet-server_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_tftp-server_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_vsftpd_installed.sh
>  create mode 100644 RHEL/7/input/checks/package_vsftpd_installed.xml
>  create mode 100644 RHEL/7/input/checks/package_vsftpd_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_xinetd_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/package_xorg-x11-server-common_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_ypbind_removed.xml
>  create mode 100644 RHEL/7/input/checks/package_ypserv_removed.xml
>  create mode 100644 RHEL/7/input/checks/service_abrtd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_acpid_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_atd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_auditd_enabled.xml
>  create mode 100644 RHEL/7/input/checks/service_autofs_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_avahi-daemon_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_bluetooth_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_certmonger_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_cgconfig_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_crond_enabled.xml
>  create mode 100644 RHEL/7/input/checks/service_cups_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_dhcpd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_dovecot_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_httpd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_ip6tables_enabled.xml
>  create mode 100644 RHEL/7/input/checks/service_iptables_enabled.xml
>  create mode 100644 RHEL/7/input/checks/service_irqbalance_enabled.xml
>  create mode 100644 RHEL/7/input/checks/service_kdump_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_mdmonitor_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_named_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_nfs-lock_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_nfs-server_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_ntpd_enabled.xml
>  create mode 100644 RHEL/7/input/checks/service_oddjobd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_portreserve_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_postfix_enabled.xml
>  create mode 100644 RHEL/7/input/checks/service_psacct_enabled.xml
>  create mode 100644 RHEL/7/input/checks/service_qpidd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_quotaon_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_rdisc_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_rhnsd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_rhsmcertd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_rpcgssd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_rpcidmapd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_rpcsvcgssd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_rsyslog_enabled.xml
>  create mode 100644 RHEL/7/input/checks/service_saslauthd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_smartd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_smb_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_snmpd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_squid_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_sysstat_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_tftp_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_vsftpd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_xinetd_disabled.xml
>  create mode 100644 RHEL/7/input/checks/service_ypbind_disabled.xml
>  create mode 100644 RHEL/7/input/checks/templates/Makefile
>  create mode 100755
>  RHEL/7/input/checks/templates/create_kernel_modules_disabled.py
>  create mode 100755 RHEL/7/input/checks/templates/create_package_installed.py
>  create mode 100755 RHEL/7/input/checks/templates/create_package_removed.py
>  create mode 100755
>  RHEL/7/input/checks/templates/create_services_systemd_disabled.py
>  create mode 100755
>  RHEL/7/input/checks/templates/create_services_systemd_enabled.py
>  create mode 100755
>  RHEL/7/input/checks/templates/create_services_sysv_disabled.py
>  create mode 100644 RHEL/7/input/checks/templates/kernel_modules_disabled.csv
>  create mode 100644
>  RHEL/7/input/checks/templates/output/kernel_module_cramfs_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/kernel_module_dccp_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/kernel_module_jffs2_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/kernel_module_rds_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/kernel_module_sctp_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/kernel_module_squashfs_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/kernel_module_udf_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/kernel_module_usb-storage_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_abrt_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_aide_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_aide_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_at_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_audit_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_audit_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_bind_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_cpuspeed_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_cronie_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_cronie_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_cups_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_cyrus-sasl_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_dbus_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_dconf_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_dconf_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_dhcp_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_dhcpd_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_dovecot_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_hal_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_httpd_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_iptables-services_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_iptables-services_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_iptables_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_iptables_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_iputils_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_irqbalance_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_irqbalance_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_kexec-tools_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_libcgroup_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_mdadm_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_net-snmp_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_nfs-utils_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_ntp_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_ntp_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_oddjob_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_openldap-servers_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_openssh-server_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_pam_ldap_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_policycoreutils_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_policycoreutils_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_portreserve_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_postfix_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_postfix_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_psacct_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_psacct_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_qpid-cpp-server_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_quota_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_rhnsd_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_rsh-server_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_rsyslog_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_rsyslog_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_samba-common_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_screen_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_screen_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_sendmail_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_smartmontools_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_squid_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_subscription-manager_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_sysstat_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_talk-server_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_telnet-server_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_tftp-server_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_vsftpd_installed.sh
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_vsftpd_installed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_vsftpd_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_xinetd_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_xorg-x11-server-common_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_ypbind_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/package_ypserv_removed.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_abrtd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_acpid_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_atd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_auditd_enabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_autofs_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_avahi-daemon_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_bluetooth_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_certmonger_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_cgconfig_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_crond_enabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_cups_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_dhcpd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_dovecot_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_httpd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_ip6tables_enabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_iptables_enabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_irqbalance_enabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_kdump_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_mdmonitor_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_named_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_nfs-lock_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_nfs-server_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_ntpd_enabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_oddjobd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_portreserve_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_postfix_enabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_psacct_enabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_qpidd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_quotaon_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_rdisc_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_rhnsd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_rhsmcertd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_rpcgssd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_rpcidmapd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_rpcsvcgssd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_rsyslog_enabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_saslauthd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_smartd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_smb_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_snmpd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_squid_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_sshd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_sysstat_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_tftp_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_vsftpd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_xinetd_disabled.xml
>  create mode 100644
>  RHEL/7/input/checks/templates/output/service_ypbind_disabled.xml
>  create mode 100644 RHEL/7/input/checks/templates/packages_removed.csv
>  create mode 100644
>  RHEL/7/input/checks/templates/services_systemd_disabled.csv
>  create mode 100644
>  RHEL/7/input/checks/templates/services_systemd_enabled.csv
>  create mode 100644 RHEL/7/input/checks/templates/services_sysv_disabled.csv
>  create mode 100644
>  RHEL/7/input/checks/templates/template_BASH_package_installed
>  create mode 100644
>  RHEL/7/input/checks/templates/template_OVAL_package_installed
>  create mode 100644
>  RHEL/7/input/checks/templates/template_kernel_module_disabled
>  create mode 100644 RHEL/7/input/checks/templates/template_package_removed
>  create mode 100644
>  RHEL/7/input/checks/templates/template_service_systemd_disabled
>  create mode 100644
>  RHEL/7/input/checks/templates/template_service_systemd_enabled
>  create mode 100644
>  RHEL/7/input/checks/templates/template_service_sysv_disabled
>  create mode 100644 RHEL/7/input/fixes/bash/package_dconf_installed.sh
>  create mode 100644
>  RHEL/7/input/fixes/bash/package_iptables-services_installed.sh
> 
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> 


More information about the scap-security-guide mailing list