<div dir="ltr"><div>Hey all,<br><br></div><div>Just ran oscap with the xml files available on the website (Benchmark version 0.9). Here are the issues that seem to be false positives. Prefix everything with "RHEL-06-000". These are all marked as fail but the server meets the STIG.<br>
<br></div><div> 9 rhnsd can be on if configured to Satellite server or similar<br></div><div> 57 ucredit <br></div><div> 58 ocredit<br></div><div> 59 lcredit<br></div><div> 73 /etc/issue<br></div><div> 98 No ipv6 installed <br>
99 "<br></div><div>165 adjtimex<br></div><div>167 settimeofday<br></div><div>169 stime // Also, the STIG is wrong. There is no x86_64 stime syscall<br></div><div>171 clock_settime<br></div><div>184-196, 200 chmod, chown, etc...<br>
</div><div>206-211 No telnet installed or turned on<br></div><div>240 /etc/ssh/sshd_config Banner<br></div><div>271 If there are no removable partitions this is not a finding.<br></div><div>278 If the file permissions are more restrictive then it is not a finding.<br>
</div><div>324 No X running<br>326 " <br></div><div>346 Finding reported on umask 022<br></div><div>348 No vsftp installed, thus no file.<br></div><div>506 "hushlogin" <br></div><div>507 PrintLastLog <br>
<br></div><div><br></div><div>Am I confused in thinking a system in run level 3 should net need to worry about X/Gnome findings?<br><br></div><div>Leam<br></div><div><div><br>-- <br><div><a href="http://leamhall.blogspot.com/" target="_blank">Mind on a Mission</a></div>
</div></div></div>