scap-security-guide October 2013

scap-security-guide@lists.fedorahosted.org

32 participants
82 discussions

[PATCH] *** SUBJECT HERE ***
by Caleb Cooper 01 Oct '13

01 Oct '13

*** BLURB HERE *** Caleb Cooper (1): Added OVAL content for the file_ownership_binary_dirs rule as the file file_ownership_binary_dirs.xml and added the oval id to the corresponding XCCDF content in files.xml RHEL6/input/checks/file_ownership_binary_dirs.xml | 163 +++++++++++++++++++++ 1 files changed, 163 insertions(+), 0 deletions(-) create mode 100644 RHEL6/input/checks/file_ownership_binary_dirs.xml

2 3

template_sysctl
by Rui Pedro Bernardino 01 Oct '13

01 Oct '13

Hi, I'm getting false results on 'sysctl_net_ipv6_conf_default_accept_ra' on systems that don't have ipv6 module at all. I think this also applies to any undefined sys variables. Suggested change: RHEL6/input/checks/templates/template_sysctl - <unix:sysctl_test check="all" check_existence="all_exist" comment="kernel runtime parameter SYSCTLVAR set to SYSCTLVAL" id="test_runtime_sysctl_SYSCTLID" version="1"> + <unix:sysctl_test check="all" check_existence="any_exist" comment="kernel runtime parameter SYSCTLVAR set to SYSCTLVAL" id="test_runtime_sysctl_SYSCTLID" version="1"> Does this make sense? regards -- Rui Pedro Bernardino CTE2/Tecnologias e Desenvolvimento PT Inovação

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

scap-security-guide October 2013