[PATCH] addition of OCIL check text and language revision
by David Smith
Several language and formatting changes in this one, a couple of OCIL additions, and a rationale addition.
David Smith (1):
inclusion of OCIL check text and modification of language
RHEL6/input/system/accounts/banners.xml | 12 ++++++
RHEL6/input/system/accounts/pam.xml | 31 ++++++++++++----
RHEL6/input/system/accounts/physical.xml | 27 +++++++++-----
.../accounts/restrictions/password_expiration.xml | 10 +++---
RHEL6/input/system/logging.xml | 39 +++++++++-----------
RHEL6/input/system/network/ipv6.xml | 11 +++---
RHEL6/input/system/selinux.xml | 6 ++--
RHEL6/input/system/software/updating.xml | 7 ++--
8 files changed, 87 insertions(+), 56 deletions(-)
11 years, 6 months
[PATCH] Added OCIL check text
by David Smith
added a bit more OCIL check text
David Smith (1):
added OCIL checks
RHEL6/input/system/accounts/banners.xml | 5 +++++
RHEL6/input/system/logging.xml | 23 +++++++++++++++++++++++
RHEL6/input/system/network/ipv6.xml | 8 ++++++--
3 files changed, 34 insertions(+), 2 deletions(-)
11 years, 6 months
[PATCH 0/2] Various OCIL modifications
by David Smith
added OCIL checks and clauses
David Smith (2):
added or modified check text, adding OCIL clauses where appropriate
added or modified check text, adding OCIL clauses where appropriate
RHEL6/input/system/accounts/pam.xml | 24 +++++++++++++
RHEL6/input/system/accounts/physical.xml | 28 +++++++++++++++
.../accounts/restrictions/password_expiration.xml | 36 +++++++++++++++----
RHEL6/input/system/accounts/session.xml | 31 ++++++++++++-----
RHEL6/input/system/permissions/files.xml | 20 +++++-----
5 files changed, 112 insertions(+), 27 deletions(-)
11 years, 6 months
[PATCH 0/4] support for alternate titles
by Jeffrey Blank
This commit set provides support for writing alternate titles for the Rules in
the XCCDF content in scap-security-guide. Although this defies a strategy of
leveraging a common body of high-quality SCAP content and incurs additional
costs, it was expressed as a necessity.
To synchronize an alternate titles file (currently only for the STIG profile):
$ make alt-titles
This will cause input/utils/sync-alt-titles.py to includes a placeholder for an
alternate Rule title for every Rule in the specified (currently only
stig-server) Profile. The short title is also included and synchronized as an
aide to data entry.
A new transform (xccdf-alt-titles.xslt) performs replacement of the concise,
broadly-acceptable title with whatever title language is desired instead.
Currently, this is activated in the Makerule table-stig.
Jeffrey Blank (4):
new file (alt-titles-stig.xml) that enables entering alternate titles
for Rules
new transform to replace concise, broadly-acceptable titles with
alternative titles in XCCDF
helper script to create alternate titles files and link it to Rules
in a XCCDF Profile * short title is also synchronized as an
aide to data entry
added new Makerules to insert alternate titles, create STIG tables
with them
RHEL6/Makefile | 11 +-
RHEL6/input/auxiliary/alt-titles-stig.xml | 455 +++++++++++++++++++++++++++++
RHEL6/transforms/xccdf-alt-titles.xslt | 36 +++
RHEL6/utils/sync-alt-titles.py | 84 ++++++
4 files changed, 584 insertions(+), 2 deletions(-)
create mode 100644 RHEL6/input/auxiliary/alt-titles-stig.xml
create mode 100644 RHEL6/transforms/xccdf-alt-titles.xslt
create mode 100755 RHEL6/utils/sync-alt-titles.py
11 years, 6 months