<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 10/2/13 8:04 PM, Kordell, Luke T
wrote:<br>
</div>
<blockquote
cite="mid:EBDE6A904AEF60448F36706839FFB5250B8204AB@HVXDSP21.us.lmco.com"
type="cite">
<pre wrap="">Hi,
I double-checked to make sure I added the correct line to the guide.xslt file but when I greped the ssg-rhel6=xccdf.xml file it did not return the usgcb file. I wish I could pull the latest update and patches quickly but am unable to do so with my RHEL machine at the moment. </pre>
</blockquote>
<br>
If you do a 'git pull', or simply reclone, you'll notice the new
profile in there. It should make the next RPM release too.<br>
<br>
<blockquote
cite="mid:EBDE6A904AEF60448F36706839FFB5250B8204AB@HVXDSP21.us.lmco.com"
type="cite">
<pre wrap="">Basically what I'm trying to do is find a good starting-point for a completely customized profile that calls a particular set of rules I will define. I think I need to conduct a little more research to make-sure I fully understand how to use the scripts to generate OVAL content and how to create a profile. I think I have the rule creation/adding part down. Can you point me in the right direction?
As always thank you for the assistance!
</pre>
</blockquote>
Consider exploring the XCCDF "extends" option, as used in the STIG:<br>
<a class="moz-txt-link-freetext" href="https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/RHEL6/input/profiles/stig-rhel6-server.xml">https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/RHEL6/input/profiles/stig-rhel6-server.xml</a><br>
<br>
Specifically:<br>
<blockquote type="cite">
<meta charset="utf-8">
<pre style="margin: 0px; padding: 0px; color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 19px; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);"><code style="background-color: rgba(0, 0, 0, 0.0980392); padding: 1px; background-position: initial initial; background-repeat: initial initial;"><Profile id="stig-rhel6-server" extends="common"></code></pre>
</blockquote>
<br>
The STIG inherits *everything* from the common profile, located
here:<br>
<a class="moz-txt-link-freetext" href="https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/RHEL6/input/profiles/common.xml">https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/RHEL6/input/profiles/common.xml</a><br>
<br>
Once inherited, anything in the STIG profile takes precedence,
allowing for customization of things like password lengh, audit
retention, etc.<br>
<br>
If you wanted to change a refine value, such as maximum age of
passwords, simply use a refine-value tag:<br>
<meta charset="utf-8">
<blockquote type="cite">
<meta charset="utf-8">
<pre style="margin: 0px; padding: 0px; color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 19px; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);"><code style="background-color: rgba(0, 0, 0, 0.0980392); padding: 1px; background-position: initial initial; background-repeat: initial initial;"><refine-value idref="var_acounts_maximum_age_login_defs" selector="5"/></code></pre>
</blockquote>
... which would change the value from the STIG (which is 180 days),
to 5 in your custom profile<br>
<br>
Or perhaps there's a STIG rule which you disagree with, disable it
via the selected operator:<br>
<blockquote type="cite">
<meta charset="utf-8">
<pre style="margin: 0px; padding: 0px; color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 19px; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);"><code style="background-color: rgba(0, 0, 0, 0.0980392); padding: 1px; background-position: initial initial; background-repeat: initial initial;"><select idref="password_require_uppercases" selected="false"/></code></pre>
</blockquote>
<br>
</body>
</html>