<div dir="ltr">> <span style="font-family:arial,sans-serif;font-size:13px">I also added rsyslog to the template file for installed packages, since it was apparently missing, </span><div><span style="font-family:arial,sans-serif;font-size:13px">> even though the compiled check had been added in a previous commit.</span></div>
<div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div><div><font face="arial, sans-serif">Huh, odd.</font></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">Thanks very much for the testing, and consider this ACK'ed. Unless they're egregiously wrong, I would not devote effort to fixing up descriptions in each OVAL check. Does anyone know: is this displayed by any evaluation tooling? Is there an XCCDF element that would be preferred for automatic insertion here?</font></div>
<div><font face="arial, sans-serif"><br></font></div>
<div><font face="arial, sans-serif"> </font></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Aug 19, 2013 at 8:31 PM, Maura Dailey <span dir="ltr"><<a href="mailto:maura@eclipse.ncsc.mil" target="_blank">maura@eclipse.ncsc.mil</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I went through a whole bunch more checks, tested them, tweaked their regex as necessary, and corrected comment fields. I also ran them through tidy and fixed them up a little. A few checks had "dead states" which were never referenced in a test field, so I deleted those.<br>
<br>
I also added rsyslog to the template file for installed packages, since it was apparently missing, even though the compiled check had been added in a previous commit.<br>
<br>
- Maura Dailey<br>
<br>
Maura Dailey (1):<br>
Another batch of tested checks. Includes some checks that had their<br>
comments expanded or were renamed from random values.<br>
<br>
RHEL6/input/checks/banner_etc_issue.xml | 1 +<br>
.../checks/dovecot_disable_plaintext_auth.xml | 10 ++++---<br>
RHEL6/input/checks/dovecot_enable_ssl.xml | 12 ++++----<br>
.../input/checks/logwatch_configured_hostlimit.xml | 8 ++---<br>
.../checks/logwatch_configured_splithosts.xml | 10 +++----<br>
RHEL6/input/checks/network_sniffer_disabled.xml | 1 +<br>
RHEL6/input/checks/ntp_remote_server.xml | 27 +++++++++----------<br>
.../checks/postfix_network_listening_disabled.xml | 26 +++++++++---------<br>
RHEL6/input/checks/postfix_server_banner.xml | 17 ++++--------<br>
RHEL6/input/checks/restrict_serial_port_logins.xml | 7 +++--<br>
.../checks/securetty_root_login_console_only.xml | 5 ++-<br>
RHEL6/input/checks/selinux_mode.xml | 9 ++++--<br>
RHEL6/input/checks/selinux_policytype.xml | 18 +++++--------<br>
.../set_password_hashing_algorithm_libuserconf.xml | 3 +-<br>
.../set_password_hashing_algorithm_logindefs.xml | 5 ++-<br>
RHEL6/input/checks/singleuser_password.xml | 19 ++++++--------<br>
RHEL6/input/checks/smb_client_signing_smb_conf.xml | 23 +++++++++--------<br>
.../sysconfig_networking_bootproto_ifcfg.xml | 20 +++++++-------<br>
RHEL6/input/checks/sysconfig_nozeroconf_yes.xml | 22 +++++++---------<br>
.../input/checks/system_info_architecture_x86.xml | 22 ++++++++--------<br>
.../checks/system_info_architecture_x86_64.xml | 22 ++++++++--------<br>
.../input/checks/templates/packages_installed.csv | 3 +-<br>
RHEL6/input/checks/tftpd_uses_secure_mode.xml | 3 +-<br>
RHEL6/input/checks/xwindows_runlevel_setting.xml | 3 +-<br>
24 files changed, 146 insertions(+), 150 deletions(-)<br>
<br>
_______________________________________________<br>
scap-security-guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
</blockquote></div><br></div>