<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 11/16/12 5:54 PM, Shawn Wells wrote:<br>
</div>
<blockquote cite="mid:20121116225417.GA5752@mail.corp.redhat.com"
type="cite">
<br>
<fieldset class="mimeAttachmentHeader"><legend
class="mimeAttachmentHeaderName">0003-DISA-FSO-Copy-editing-of-Avahi-section.patch</legend></fieldset>
<br>
<div class="moz-text-plain" wrap="true" graphical-quote="true"
style="font-family: -moz-fixed; font-size: 12px;"
lang="x-western">
<pre wrap="">From 2a61a559641866602df30eb638f31ae0b149b87e Mon Sep 17 00:00:00 2001
From: Shawn Wells <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:shawn@redhat.com"><shawn@redhat.com></a>
Date: Fri, 16 Nov 2012 06:55:58 -0500
Subject: [PATCH 03/13] DISA FSO: Copy editing of Avahi section
DISA FSO provided copy editing of the Avahi section
---
RHEL6/input/services/avahi.xml | 12 ++++++------
1 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/RHEL6/input/services/avahi.xml b/RHEL6/input/services/avahi.xml
index c4112b7..af7dd1c 100644
--- a/RHEL6/input/services/avahi.xml
+++ b/RHEL6/input/services/avahi.xml
@@ -50,9 +50,9 @@ <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.avahi.org">http://www.avahi.org</a> for more detailed information about the configuration optio
<title>Serve Avahi Only via Required Protocol</title>
<description>
If you are using only IPv4, edit <tt>/etc/avahi/avahi-daemon.conf</tt> and ensure
-the following line exists in the <tt>[server]</tt> section:
+the following line exists in the <tt>[server]</tt> section.
<pre>use-ipv6=no</pre>
-Similarly, if you are using only IPv6, disable IPv4 sockets with the line:
+Similarly, if you are using only IPv6, disable IPv4 sockets with the line.
<pre>use-ipv4=no</pre>
</description>
<ref nist="CM-6, CM-7" />
@@ -83,7 +83,7 @@ are not permitted.
<title>Prevent Other Programs from Using Avahi's Port</title>
<description>
To prevent other mDNS stacks from running, edit <tt>/etc/avahi/avahi-daemon.conf</tt>
-and ensure the following line appears in the <tt>[server]</tt> section:
+and ensure the following line appears in the <tt>[server]</tt> section.
<pre>disallow-other-stacks=yes</pre>
</description>
<rationale>
@@ -98,7 +98,7 @@ that port on the system.
<title>Disable Avahi Publishing</title>
<description>
To prevent other mDNS stacks from running, edit <tt>/etc/avahi/avahi-daemon.conf</tt>
-and ensure the following line appears in the <tt>[server]</tt> section:
+and ensure the following line appears in the <tt>[server]</tt> section.
<pre>disallow-other-stacks=yes</pre>
</description>
<rationale>
@@ -116,10 +116,10 @@ If it is necessary to publish some information to the network, it should not be
by any extraneous information, or by information supplied by a non-trusted source
on the system.
Prevent user applications from using Avahi to publish services by adding or
-correcting the following line in the <tt>[publish]</tt> section:
+correcting the following line in the <tt>[publish]</tt> section.
<pre>disable-user-service-publishing=yes</pre>
Implement as many of the following lines as possible, to restrict the information
-published by Avahi:
+published by Avahi.
<pre>publish-addresses=no
publish-hinfo=no
publish-workstation=no
<div class="moz-txt-sig">--
1.7.1
</div></pre>
</div>
</blockquote>
<br>
Ack<br>
<br>
(note these patches were created by FSO, not myself. I only posted
publicly.)
</body>
</html>