<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 3/29/13 8:28 PM, Shawn Wells wrote:<br>
    </div>
    <blockquote cite="mid:20130330002817.GA5213@mail.corp.redhat.com"
      type="cite">
      <br>
      <fieldset class="mimeAttachmentHeader"><legend
          class="mimeAttachmentHeaderName">0003-Updated-package_screen_installed.patch</legend></fieldset>
      <br>
      <div class="moz-text-plain" wrap="true" graphical-quote="true"
        style="font-family: -moz-fixed; font-size: 12px;"
        lang="x-western">
        <pre wrap="">From c6170e4caad86c8ad4b2146b0098e8fef8c0f131 Mon Sep 17 00:00:00 2001
From: Shawn Wells <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:shawn@redhat.com">&lt;shawn@redhat.com&gt;</a>
Date: Fri, 29 Mar 2013 16:15:52 -0400
Subject: [PATCH 03/21] Updated package_screen_installed
 - Changed XCCDF rule to match naming scheme of package_PACKAGE_installed
 - Updated associated profiles
 - Added screen to templates file, generating OVAL + BASH

---
 RHEL6/input/auxiliary/alt-titles-stig.xml          |    2 +-
 RHEL6/input/checks/package_screen_installed.xml    |   25 ++++++++++++++++++++
 .../input/checks/templates/packages_installed.csv  |    1 +
 RHEL6/input/fixes/bash/package_screen_installed.sh |    1 +
 RHEL6/input/profiles/common.xml                    |    2 +-
 RHEL6/input/profiles/manual_remediation.xml        |    2 +-
 RHEL6/input/system/accounts/physical.xml           |    2 +-
 7 files changed, 31 insertions(+), 4 deletions(-)
 create mode 100644 RHEL6/input/checks/package_screen_installed.xml
 create mode 100644 RHEL6/input/fixes/bash/package_screen_installed.sh

diff --git a/RHEL6/input/auxiliary/alt-titles-stig.xml b/RHEL6/input/auxiliary/alt-titles-stig.xml
index ca3f9ac..d4a9cf0 100644
--- a/RHEL6/input/auxiliary/alt-titles-stig.xml
+++ b/RHEL6/input/auxiliary/alt-titles-stig.xml
@@ -242,7 +242,7 @@ The graphical desktop environment must have automatic lock enabled.
 &lt;title rule="set_blank_screensaver" shorttitle="Implement Blank Screen Saver"&gt;
 The system must display a publicly-viewable pattern during a graphical desktop environment session lock.
 &lt;/title&gt;
-&lt;title rule="install_screen_package" shorttitle="Install the screen Package"&gt;
+&lt;title rule="package_screen_installed" shorttitle="Install the screen Package"&gt;
 The system must allow locking of the console screen.
 &lt;/title&gt;
 &lt;title rule="set_system_login_banner" shorttitle="Modify the System Login Banner"&gt;
diff --git a/RHEL6/input/checks/package_screen_installed.xml b/RHEL6/input/checks/package_screen_installed.xml
new file mode 100644
index 0000000..3be6486
--- /dev/null
+++ b/RHEL6/input/checks/package_screen_installed.xml
@@ -0,0 +1,25 @@
+&lt;def-group&gt;
+ &lt;!-- THIS FILE IS GENERATED by create_package_installed.py.  DO NOT EDIT.  --&gt;
+  &lt;definition class="compliance" id="package_screen_installed"
+  version="1"&gt;
+    &lt;metadata&gt;
+      &lt;title&gt;Package screen Installed&lt;/title&gt;
+      &lt;affected family="unix"&gt;
+        &lt;platform&gt;Red Hat Enterprise Linux 6&lt;/platform&gt;
+      &lt;/affected&gt;
+      &lt;description&gt;The RPM package screen should be installed.&lt;/description&gt;
+    &lt;/metadata&gt;
+    &lt;criteria&gt;
+      &lt;criterion comment="package screen is installed"
+      test_ref="test_package_screen_installed" /&gt;
+    &lt;/criteria&gt;
+  &lt;/definition&gt;
+  &lt;linux:rpminfo_test check="all" check_existence="all_exist"
+  id="test_package_screen_installed" version="1"
+  comment="package screen is installed"&gt;
+    &lt;linux:object object_ref="obj_package_screen" /&gt;
+  &lt;/linux:rpminfo_test&gt;
+  &lt;linux:rpminfo_object id="obj_package_screen" version="1"&gt;
+    &lt;linux:name&gt;screen&lt;/linux:name&gt;
+  &lt;/linux:rpminfo_object&gt;
+&lt;/def-group&gt;
diff --git a/RHEL6/input/checks/templates/packages_installed.csv b/RHEL6/input/checks/templates/packages_installed.csv
index 2a9fe8b..706cba3 100644
--- a/RHEL6/input/checks/templates/packages_installed.csv
+++ b/RHEL6/input/checks/templates/packages_installed.csv
@@ -16,3 +16,4 @@ psacct
 rsyslog
 vlock
 vsftpd
+screen
diff --git a/RHEL6/input/fixes/bash/package_screen_installed.sh b/RHEL6/input/fixes/bash/package_screen_installed.sh
new file mode 100644
index 0000000..cc566bf
--- /dev/null
+++ b/RHEL6/input/fixes/bash/package_screen_installed.sh
@@ -0,0 +1 @@
+yum -y install screen
diff --git a/RHEL6/input/profiles/common.xml b/RHEL6/input/profiles/common.xml
index d63a875..2a7565a 100644
--- a/RHEL6/input/profiles/common.xml
+++ b/RHEL6/input/profiles/common.xml
@@ -67,7 +67,7 @@
 &lt;select idref="bootloader_password" selected="true"/&gt;
 &lt;select idref="require_singleuser_auth" selected="true"/&gt;
 &lt;select idref="disable_interactive_boot" selected="true"/&gt;
-&lt;select idref="install_screen_package" selected="true"/&gt;
+&lt;select idref="package_screen_installed" selected="true"/&gt;
 &lt;select idref="set_system_login_banner" selected="true"/&gt;
 &lt;!-- CURRENTLY NOT IMPLEMENTED &lt;select idref="set_gui_login_banner" selected="true"/&gt; --&gt;
 
diff --git a/RHEL6/input/profiles/manual_remediation.xml b/RHEL6/input/profiles/manual_remediation.xml
index 1767082..b831fa7 100644
--- a/RHEL6/input/profiles/manual_remediation.xml
+++ b/RHEL6/input/profiles/manual_remediation.xml
@@ -4,7 +4,7 @@
 &lt;select idref="package_aide_installed" selected="true"/&gt;
 &lt;select idref="install_vsftpd" selected="true"/&gt;
 &lt;select idref="install_openswan" selected="true"/&gt;
-&lt;select idref="install_screen_package" selected="true"/&gt;
+&lt;select idref="package_screen_installed" selected="true"/&gt;
 &lt;select idref="bios_disable_usb_boot" selected="true"/&gt;
 &lt;select idref="bootloader_password" selected="true"/&gt;
 &lt;select idref="rsyslog_send_messages_to_logserver" selected="true"/&gt;
diff --git a/RHEL6/input/system/accounts/physical.xml b/RHEL6/input/system/accounts/physical.xml
index 4da9a73..e22f16b 100644
--- a/RHEL6/input/system/accounts/physical.xml
+++ b/RHEL6/input/system/accounts/physical.xml
@@ -357,7 +357,7 @@ A console screen locking mechanism is provided in the
 &lt;tt&gt;screen&lt;/tt&gt; package, which is not installed by default.
 &lt;/description&gt;
 
-&lt;Rule id="install_screen_package"&gt;
+&lt;Rule id="package_screen_installed"&gt;
 &lt;title&gt;Install the screen Package&lt;/title&gt;
 &lt;description&gt;
 To enable console screen locking, install the &lt;tt&gt;screen&lt;/tt&gt; package:
<div class="moz-txt-sig">-- 
1.7.1

</div></pre>
      </div>
    </blockquote>
    <br>
    Pushed per Jeff's ack<br>
    <br>
    $ git push<br>
    Counting objects: 35, done.<br>
    Compressing objects: 100% (18/18), done.<br>
    Writing objects: 100% (19/19), 2.10 KiB, done.<br>
    Total 19 (delta 14), reused 0 (delta 0)<br>
    To <a class="moz-txt-link-freetext" href="ssh://git.fedorahosted.org/git/scap-security-guide.git">ssh://git.fedorahosted.org/git/scap-security-guide.git</a><br>
       01fe249..fe33545  master -&gt; master<br>
    <br>
    <br>
    <br>
  </body>
</html>