I realize the patch looked huge, but with the exception of committing
the kernel scripts by mistake, the only things I was really committing
here were 2 new scripts, create_services_systemd_disabled.py and
create_services_systemd_enabled.py. The rest of the files were either
the 3 scripts I copied straight from the RHEL 6 template folder or the
output of all five scripts when run together. I made a good faith effort
to ensure the scripts weren't generating extra junk checks that didn't
make sense on RHEL 7, but I did not attempt to make any changes past
that. I have no problem rewriting my patches to support the shared
infrastructure and will attempt to do so now, but that's a different
sort of critique. While I'm working on restructuring the shared package
checks, please tell me if you've noticed any obvious gaping flaws in the
two systemd template scripts.
Since I can't reasonably submit my new services script until I've
addressed the shared package problem you've illustrated, I'm going to
back up and submit a patch to a) remove the generated packages from RHEL
6 that are shared by RHEL 7, b) submit non script generated package
files to shared with multiple platform ids, and c) create symlinks to
those files in RHEL 6 and RHEL 7's checks folders. I assume this is what
you wanted, based on your feedback below. I looked in the Fedora
directory and identified package_ntp_installed.xml and
package_openssh_removed.xml as more examples of shared package checks
with RHEL 6 and RHEL 7. I assume that these should be moved to shared as
well.
More responses are inline below.
- Maura Dailey
On 02/25/2014 10:42 AM, Jan Lieskovsky wrote:
Hello Maura,
thank you for sharing the patch.
Yet before I dive into the details, let me mention that I really appreciate your work
(and it will be great movement ahead once your proposed change is applied).
Let me mention couple of observations though:
---------------------------------------------
* the incorrect idtranslate.pyc byte-compiled version has been removed from the repo
already (though at the time you preparing the proposal it was there yet)
https://git.fedorahosted.org/cgit/scap-security-guide.git/commit/?id=97ad...
Easy fix, yes, I noticed your patch after I emailed mine out and knew
I'd have to update my patch to match.
Not a big deal, since it's enough to delete:
diff --git a/RHEL/7/transforms/idtranslate.pyc b/RHEL/7/transforms/idtranslate.pyc
hunk and the row "RHEL/7/transforms/idtranslate.pyc | Bin 5149
-> 5160 bytes"
and the patch applies successfully,
* the patch when applied fails to build - more exactly two rules refer to / extend the
definition of "package_iptables-ipv6_installed" rule:
$ grep -rHn "package_iptables-ipv6_installed"
0001-Adding-new-templates-and-new-scripts-to-support-RHEL.patch
0001-Adding-new-templates-and-new-scripts-to-support-RHEL.patch:3196:+
<extend_definition comment="iptables-ipv6 installed"
definition_ref="package_iptables-
ipv6_installed" />
0001-Adding-new-templates-and-new-scripts-to-support-RHEL.patch:7587:+
<extend_definition comment="iptables-ipv6 installed"
definition_ref="package_iptables-
ipv6_installed" />
but there's no such rule (package_iptables-ipv6_installed.xml) in
RHEL/7/input/checks after applying the patch.
Yes, I need to fix this. I remembered
to remove it from the packages
script, but didn't notice that it was still listed as a dependency in
the CSV file for services. RHEL 6 packaged the ipv6 version of iptables
completely separately. This changes in RHEL 7, which apparently makes
the move to bundle iptables and ip6tables together into one rpm, while
breaking the startup scripts into a second rpm. Technically, I guess
this means that RHEL 7 now has two package dependencies for each version
of iptables, whereas RHEL 6 only has one package dependency for each.
Once the rule is added there (copied the one with same name from
RHEL/6/input/checks) the content / rpm builds
successfully,
* the patch itself is named "RHEL7 systemd support" but there are hunks also
for functionality
not related with systemd RHEL6 to RHEL7 switch:
- checks / remediation for dynamic loading of kernel modules (cramfs, dccp, etc.),
- checks for packages being installed / removed,
- checks for templating functionality,
I've been doing gobs of RHEL 7
updates and had updated the existing RHEL
6 scripts as a group because so many of them have interdependencies. I
did not intend to submit the kernel checks at the same time (I'm not
done my own testing yet, since I have to test if RHEL 7 has completely
deprecated /etc/modprobe.conf yet), but I didn't catch it before sending
the initial email late Friday night. I'll back it out before
resubmitting any patches. If we want to get technical here, the actual
patch name is not "RHEL7 systemd support", that's just the header on the
cover letter email. The actual patch name is "Adding new templates and
new scripts to support RHEL 7's switch to systemd. Also, adjusted the
service and package names to reflect the currently available items in
the RHEL 7 beta."
* there are (selected) definitions that are duplicated on two places
(in RHEL/6 and RHEL/7).
Example (note the examples below are chosen randomly, not to be viewed as definitive
list)
$ diff -s RHEL/6/input/checks/package_cups_removed.xml
RHEL/7/input/checks/package_cups_removed.xml
Files RHEL/6/input/checks/package_cups_removed.xml and
RHEL/7/input/checks/package_cups_removed.xml are identical
$ diff -s RHEL/6/input/checks/package_dhcp_removed.xml
RHEL/7/input/checks/package_dhcp_removed.xml
Files RHEL/6/input/checks/package_dhcp_removed.xml and
RHEL/7/input/checks/package_dhcp_removed.xml are identical
Why not to identify identical files from the change, and instead of keeping it at two
times
at various places (in RHEL/6 and RHEL/7), make a general version having both platforms
(
<platform>Red Hat Enterprise Linux 6</platform>
<platform>Red Hat Enterprise Linux 7</platform>
) in the <metadata> section of the definition, place it into "shared"
directory and make appropriate
symlinks to RHEL/6 and RHEL/7 content instead?
Yes, this makes sense. However,
this will take a little time. I was
focusing very hard in my first commit on what was different in RHEL 7,
not on what was shared with RHEL 6. I also sort of assumed that the
shared folder was for things shared globally by multiple Linuxes, not
just RHEL 6 and RHEL 7. This sort of piece by piece customization breaks
the existing package template scripts, so I am going to back the package
scripts out completely and replace them with hand tooled package checks.
A small handful of packages are shared between Fedora, RHEL 6, and RHEL
7, for example, but others are only shared by RHEL 6 and RHEL 7.
Please have a look at example:
$ pwd
scap-security-guide/shared/oval
$ file ../../RHEL/6/input/checks/file_permissions_library_dirs.xml
../../RHEL/6/input/checks/file_permissions_library_dirs.xml: symbolic link to
`../../../../shared/oval/file_permissions_library_dirs.xml'
$ file ../../RHEL/7/input/checks/file_permissions_library_dirs.xml
../../RHEL/7/input/checks/file_permissions_library_dirs.xml: symbolic link to
`../../../../shared/oval/file_permissions_library_dirs.xml'
$ file ../../Fedora/input/checks/file_permissions_library_dirs.xml
../../Fedora/input/checks/file_permissions_library_dirs.xml: symbolic link to
`../../../shared/oval/file_permissions_library_dirs.xml'
From brief look it seems to me this way all of packages installed / removed checks
etc. could be shared,
* similar approach for dynamic modules loading part - having look at (see attached
cramfs.diff)
created via:
$ diff -pruN RHEL/6/input/checks/kernel_module_cramfs_disabled.xml
RHEL/7/input/checks/kernel_module_cramfs_disabled.xml
it doesn't look to me the OVAL definitions are differing that much. In other words
I think
it would be worthy the effort to identify, why these definitions differ, and create
one
universal version, that would be placed in shared/ directory. And if additional
adjustments
should be necessary for RHEL-7 version, that definition would extend the definition
from the
shared/ directory (and again use symlinks in RHEL/6 and RHEL/7 places),
When I
resubmit the kernel module later, I will take this into account.
It was not supposed to be submitted yet, because I wasn't finished
figuring out whether or not to support the legacy /etc/modprobe.conf. If
RHEL 7 does respect /etc/modprobe.conf, the kernel module checks
actually will be functionally identical, except for a few changes in the
included modules between RHEL 6's 2.6 kernel and RHEL 7's 3.10 kernel.
* as mentioned in the attached cramfs.diff the patch proposal keeps
test_attestations untouched
(particular entry from cramfs.diff):
<reference source="swells" ref_id="20130928"
ref_url="test_attestation"/>
I think we should reset them by each subsequent commit / each modification of
particular rule.
For RHEL-7 this would mean there wouldn't be test_attestation entry present at the
beginning
at all. And it would be added only later once the content has been actually tested and
confirmed
to be working on RHEL-7. Because current state induces the feeling the
RHEL/7/input/checks/kernel_module_cramfs_disabled.xml
was actually tested by Shawn Wells on September the 9-th 2013, which is not true
(it's RHEL/6
content version which was).
Absolutely correct, I left this in from my earlier
testing of the
script's behavior with different header fields. I also made a similar
mistake in the package scripts, when I neglected to replace all
instances of RHEL 6 with RHEL 7. (The test_attestation is still in the
RHEL 6 template files and has been for some time, by the way. If you
want them gone from there too, that can be a follow up patch.)
So I propose don't have test_attestation at the beginning, and
add it only in moment testing
of RHEL/7 content was actually done (for shared/ rules if the change modifies some of
them,
the change should again invalidate / blank the test_attestation),
* last but not least, testing of dozen of smaller patches is more manageable than testing
/ review
of one huge patch.
Thank you for your thoughts. Please look for a package patch soon.
The summary - proposal:
-----------------------
1) correct (delete) the idtranslate.pyc hunk,
2) fix the missing "package_iptables-ipv6_installed" rule (if it's needed
in shared/ add it there),
3) split the big patch into set of smaller ones according to area of their applicability,
e.g:
- patches for dynamic kernel modules loading support,
- patches for packages installation,
- patches for packages removal,
- patches for service initscripts (maybe split by disabled / enabled too),
- patches for templating changes,
4) having the patches split into these categories, identify which RHEL/7
patches would be the same as their RHEL/6 alternatives, and instead of
doing separate RHEL/7 copy consider creating a shared/ directory based
instance with creating symlinks for RHEL/6 and RHEL/7,
5) for patches handling dynamic kernel modules support identify why there is difference
between (existing) RHEL/6 and (proposed) RHEL/7 version? Is possible RHEL/6 version
being
incomplete? Would RHEL/7 version work also for RHEL/6 system?
If it would be possible the dynamic kernel modules loading support to have same OVAL
checks /
fixes for both of RHEL/6 and RHEL/7 create that "global" /
"universal" check, place it into
shared/ and make appropriate symlinks.
If there's part in RHEL/7 implementation which differs from RHEL/6 form (iow.
RHEL/7 inherits
only part of RHEL/6 definition), consider making RHEL/6 definition prototype
(candidate for
shared/ directory) and RHEL/7 definition utilizing "extend_definition"
concept of RHEL/6
implementation.
Having the above proposed summary / scenario applied will allow us to:
i) have as much as possible implementation code shared accross different products,
ii) review (and test) the patches quicker since they would be thematically close (iow
you would send a set once having it for dynamic kernel modules loading, templating
engine
changes etc.)
Hope the above being helpful (and apologize for such an exhaustive list).
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
----- Original Message -----
> From: "Maura Dailey" <maura(a)eclipse.ncsc.mil>
> To: "Jan Lieskovsky" <jlieskov(a)redhat.com>
> Sent: Monday, February 24, 2014 5:13:46 PM
> Subject: Re: [PATCH] RHEL7 systemd support
>
> I apologize. When I got in today, I had a bounce back saying the message
> body was too large. I've attempted to attach it as a separate file here.
>
> - Maura Dailey
>
> On 02/24/2014 08:53 AM, Jan Lieskovsky wrote:
>> Thank you, Maura. Another well desired change. I can dedicate
>> time slot for testing this proposal. But can you send the patch
>> in form of an attachment? From the form below I am unable to
>> determine, how the changes actually looked like.
>>
>> Or does this refer to changes made on some your private repository?
>> How we can access not just the list of changed files, but the actual
>> changes / diffed content too?
>>
>> Thank you && Regards, Jan.
>> --
>> Jan iankko Lieskovsky / Red Hat Security Technologies Team
>>
>> ----- Original Message -----
>>> From: "Maura Dailey" <maura(a)eclipse.ncsc.mil>
>>> To: scap-security-guide(a)lists.fedorahosted.org
>>> Sent: Saturday, February 22, 2014 12:32:34 AM
>>> Subject: [PATCH] RHEL7 systemd support
>>>
>>> Primarily, this is to add systemd support to RHEL 7. I borrowed a little
>>> from
>>> the old, a little from the Fedora project, and added some glue. I also
>>> made
>>> a first pass at updating kernel module, package, and service names to
>>> match
>>> what I've seen so far in the RHEL 7 beta.
>>>
>>> Maura Dailey (1):
>>> Adding new templates and new scripts to support RHEL 7's switch to
>>> systemd. Also, adjusted the service and package names to reflect
>>> the currently available items in the RHEL 7 beta.
>>>
>>> .../input/checks/kernel_module_cramfs_disabled.xml | 31 ++++++
>>> .../7/input/checks/kernel_module_dccp_disabled.xml | 31 ++++++
>>> .../input/checks/kernel_module_jffs2_disabled.xml | 31 ++++++
>>> RHEL/7/input/checks/kernel_module_rds_disabled.xml | 31 ++++++
>>> .../7/input/checks/kernel_module_sctp_disabled.xml | 31 ++++++
>>> .../checks/kernel_module_squashfs_disabled.xml | 31 ++++++
>>> RHEL/7/input/checks/kernel_module_udf_disabled.xml | 31 ++++++
>>> .../checks/kernel_module_usb-storage_disabled.xml | 31 ++++++
>>> RHEL/7/input/checks/package_abrt_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_aide_installed.sh | 1 +
>>> RHEL/7/input/checks/package_at_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_audit_installed.sh | 1 +
>>> RHEL/7/input/checks/package_audit_installed.xml | 26 +++++
>>> RHEL/7/input/checks/package_bind_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_cpuspeed_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_cronie_installed.sh | 1 +
>>> RHEL/7/input/checks/package_cronie_installed.xml | 26 +++++
>>> RHEL/7/input/checks/package_cups_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_cyrus-sasl_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_dbus_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_dconf_installed.sh | 1 +
>>> RHEL/7/input/checks/package_dconf_installed.xml | 26 +++++
>>> RHEL/7/input/checks/package_dhcp_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_dhcpd_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_dovecot_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_hal_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_httpd_removed.xml | 26 +++++
>>> .../checks/package_iptables-services_installed.sh | 1 +
>>> .../checks/package_iptables-services_installed.xml | 26 +++++
>>> RHEL/7/input/checks/package_iptables_installed.sh | 1 +
>>> RHEL/7/input/checks/package_iptables_installed.xml | 26 +++++
>>> RHEL/7/input/checks/package_iputils_removed.xml | 26 +++++
>>> .../7/input/checks/package_irqbalance_installed.sh | 1 +
>>> .../input/checks/package_irqbalance_installed.xml | 26 +++++
>>> .../7/input/checks/package_kexec-tools_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_libcgroup_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_mdadm_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_net-snmp_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_nfs-utils_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_ntp_installed.sh | 1 +
>>> RHEL/7/input/checks/package_ntp_installed.xml | 26 +++++
>>> RHEL/7/input/checks/package_oddjob_removed.xml | 26 +++++
>>> .../checks/package_openldap-servers_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_pam_ldap_removed.xml | 26 +++++
>>> .../checks/package_policycoreutils_installed.sh | 1 +
>>> .../checks/package_policycoreutils_installed.xml | 26 +++++
>>> .../7/input/checks/package_portreserve_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_postfix_installed.sh | 1 +
>>> RHEL/7/input/checks/package_postfix_installed.xml | 26 +++++
>>> RHEL/7/input/checks/package_psacct_installed.sh | 1 +
>>> RHEL/7/input/checks/package_psacct_installed.xml | 26 +++++
>>> .../checks/package_qpid-cpp-server_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_quota_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_rhnsd_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_rsh-server_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_rsyslog_installed.sh | 1 +
>>> RHEL/7/input/checks/package_rsyslog_installed.xml | 26 +++++
>>> .../input/checks/package_samba-common_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_screen_installed.sh | 1 +
>>> RHEL/7/input/checks/package_screen_installed.xml | 26 +++++
>>> RHEL/7/input/checks/package_sendmail_removed.xml | 26 +++++
>>> .../input/checks/package_smartmontools_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_squid_removed.xml | 26 +++++
>>> .../package_subscription-manager_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_sysstat_removed.xml | 26 +++++
>>> .../7/input/checks/package_talk-server_removed.xml | 26 +++++
>>> .../input/checks/package_telnet-server_removed.xml | 26 +++++
>>> .../7/input/checks/package_tftp-server_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_vsftpd_installed.sh | 1 +
>>> RHEL/7/input/checks/package_vsftpd_installed.xml | 26 +++++
>>> RHEL/7/input/checks/package_vsftpd_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_xinetd_removed.xml | 26 +++++
>>> .../package_xorg-x11-server-common_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_ypbind_removed.xml | 26 +++++
>>> RHEL/7/input/checks/package_ypserv_removed.xml | 26 +++++
>>> RHEL/7/input/checks/service_abrtd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_acpid_disabled.xml | 32 +++++++
>>> RHEL/7/input/checks/service_atd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_auditd_enabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_autofs_disabled.xml | 32 +++++++
>>> .../input/checks/service_avahi-daemon_disabled.xml | 32 +++++++
>>> RHEL/7/input/checks/service_bluetooth_disabled.xml | 32 +++++++
>>> .../7/input/checks/service_certmonger_disabled.xml | 32 +++++++
>>> RHEL/7/input/checks/service_cgconfig_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_crond_enabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_cups_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_dhcpd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_dovecot_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_httpd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_ip6tables_enabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_iptables_enabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_irqbalance_enabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_kdump_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_mdmonitor_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_named_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_nfs-lock_disabled.xml | 33 +++++++
>>> .../7/input/checks/service_nfs-server_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_ntpd_enabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_oddjobd_disabled.xml | 33 +++++++
>>> .../input/checks/service_portreserve_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_postfix_enabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_psacct_enabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_qpidd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_quotaon_disabled.xml | 32 +++++++
>>> RHEL/7/input/checks/service_rdisc_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_rhnsd_disabled.xml | 99
>>> ++++++++++++++++++++
>>> RHEL/7/input/checks/service_rhsmcertd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_rpcgssd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_rpcidmapd_disabled.xml | 33 +++++++
>>> .../7/input/checks/service_rpcsvcgssd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_rsyslog_enabled.xml | 32 +++++++
>>> RHEL/7/input/checks/service_saslauthd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_smartd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_smb_disabled.xml | 32 +++++++
>>> RHEL/7/input/checks/service_snmpd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_squid_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_sshd_disabled.xml | 25 ++---
>>> RHEL/7/input/checks/service_sysstat_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_tftp_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_vsftpd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_xinetd_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/service_ypbind_disabled.xml | 33 +++++++
>>> RHEL/7/input/checks/templates/Makefile | 24 +++++
>>> .../templates/create_kernel_modules_disabled.py | 40 ++++++++
>>> .../checks/templates/create_package_installed.py | 46 +++++++++
>>> .../checks/templates/create_package_removed.py | 39 ++++++++
>>> .../templates/create_services_systemd_disabled.py | 44 +++++++++
>>> .../templates/create_services_systemd_enabled.py | 44 +++++++++
>>> .../templates/create_services_sysv_disabled.py | 45 +++++++++
>>> .../checks/templates/kernel_modules_disabled.csv | 8 ++
>>> .../output/kernel_module_cramfs_disabled.xml | 31 ++++++
>>> .../output/kernel_module_dccp_disabled.xml | 31 ++++++
>>> .../output/kernel_module_jffs2_disabled.xml | 31 ++++++
>>> .../output/kernel_module_rds_disabled.xml | 31 ++++++
>>> .../output/kernel_module_sctp_disabled.xml | 31 ++++++
>>> .../output/kernel_module_squashfs_disabled.xml | 31 ++++++
>>> .../output/kernel_module_udf_disabled.xml | 31 ++++++
>>> .../output/kernel_module_usb-storage_disabled.xml | 31 ++++++
>>> .../templates/output/package_abrt_removed.xml | 26 +++++
>>> .../templates/output/package_aide_installed.sh | 1 +
>>> .../templates/output/package_aide_installed.xml | 26 +++++
>>> .../checks/templates/output/package_at_removed.xml | 26 +++++
>>> .../templates/output/package_audit_installed.sh | 1 +
>>> .../templates/output/package_audit_installed.xml | 26 +++++
>>> .../templates/output/package_bind_removed.xml | 26 +++++
>>> .../templates/output/package_cpuspeed_removed.xml | 26 +++++
>>> .../templates/output/package_cronie_installed.sh | 1 +
>>> .../templates/output/package_cronie_installed.xml | 26 +++++
>>> .../templates/output/package_cups_removed.xml | 26 +++++
>>> .../output/package_cyrus-sasl_removed.xml | 26 +++++
>>> .../templates/output/package_dbus_removed.xml | 26 +++++
>>> .../templates/output/package_dconf_installed.sh | 1 +
>>> .../templates/output/package_dconf_installed.xml | 26 +++++
>>> .../templates/output/package_dhcp_removed.xml | 26 +++++
>>> .../templates/output/package_dhcpd_removed.xml | 26 +++++
>>> .../templates/output/package_dovecot_removed.xml | 26 +++++
>>> .../templates/output/package_hal_removed.xml | 26 +++++
>>> .../templates/output/package_httpd_removed.xml | 26 +++++
>>> .../output/package_iptables-services_installed.sh | 1 +
>>> .../output/package_iptables-services_installed.xml | 26 +++++
>>> .../templates/output/package_iptables_installed.sh | 1 +
>>> .../output/package_iptables_installed.xml | 26 +++++
>>> .../templates/output/package_iputils_removed.xml | 26 +++++
>>> .../output/package_irqbalance_installed.sh | 1 +
>>> .../output/package_irqbalance_installed.xml | 26 +++++
>>> .../output/package_kexec-tools_removed.xml | 26 +++++
>>> .../templates/output/package_libcgroup_removed.xml | 26 +++++
>>> .../templates/output/package_mdadm_removed.xml | 26 +++++
>>> .../templates/output/package_net-snmp_removed.xml | 26 +++++
>>> .../templates/output/package_nfs-utils_removed.xml | 26 +++++
>>> .../templates/output/package_ntp_installed.sh | 1 +
>>> .../templates/output/package_ntp_installed.xml | 26 +++++
>>> .../templates/output/package_oddjob_removed.xml | 26 +++++
>>> .../output/package_openldap-servers_removed.xml | 26 +++++
>>> .../output/package_openssh-server_removed.xml | 26 +++++
>>> .../templates/output/package_pam_ldap_removed.xml | 26 +++++
>>> .../output/package_policycoreutils_installed.sh | 1 +
>>> .../output/package_policycoreutils_installed.xml | 26 +++++
>>> .../output/package_portreserve_removed.xml | 26 +++++
>>> .../templates/output/package_postfix_installed.sh | 1 +
>>> .../templates/output/package_postfix_installed.xml | 26 +++++
>>> .../templates/output/package_psacct_installed.sh | 1 +
>>> .../templates/output/package_psacct_installed.xml | 26 +++++
>>> .../output/package_qpid-cpp-server_removed.xml | 26 +++++
>>> .../templates/output/package_quota_removed.xml | 26 +++++
>>> .../templates/output/package_rhnsd_removed.xml | 26 +++++
>>> .../output/package_rsh-server_removed.xml | 26 +++++
>>> .../templates/output/package_rsyslog_installed.sh | 1 +
>>> .../templates/output/package_rsyslog_installed.xml | 26 +++++
>>> .../output/package_samba-common_removed.xml | 26 +++++
>>> .../templates/output/package_screen_installed.sh | 1 +
>>> .../templates/output/package_screen_installed.xml | 26 +++++
>>> .../templates/output/package_sendmail_removed.xml | 26 +++++
>>> .../output/package_smartmontools_removed.xml | 26 +++++
>>> .../templates/output/package_squid_removed.xml | 26 +++++
>>> .../package_subscription-manager_removed.xml | 26 +++++
>>> .../templates/output/package_sysstat_removed.xml | 26 +++++
>>> .../output/package_talk-server_removed.xml | 26 +++++
>>> .../output/package_telnet-server_removed.xml | 26 +++++
>>> .../output/package_tftp-server_removed.xml | 26 +++++
>>> .../templates/output/package_vsftpd_installed.sh | 1 +
>>> .../templates/output/package_vsftpd_installed.xml | 26 +++++
>>> .../templates/output/package_vsftpd_removed.xml | 26 +++++
>>> .../templates/output/package_xinetd_removed.xml | 26 +++++
>>> .../package_xorg-x11-server-common_removed.xml | 26 +++++
>>> .../templates/output/package_ypbind_removed.xml | 26 +++++
>>> .../templates/output/package_ypserv_removed.xml | 26 +++++
>>> .../templates/output/service_abrtd_disabled.xml | 33 +++++++
>>> .../templates/output/service_acpid_disabled.xml | 32 +++++++
>>> .../templates/output/service_atd_disabled.xml | 33 +++++++
>>> .../templates/output/service_auditd_enabled.xml | 33 +++++++
>>> .../templates/output/service_autofs_disabled.xml | 32 +++++++
>>> .../output/service_avahi-daemon_disabled.xml | 32 +++++++
>>> .../output/service_bluetooth_disabled.xml | 32 +++++++
>>> .../output/service_certmonger_disabled.xml | 32 +++++++
>>> .../templates/output/service_cgconfig_disabled.xml | 33 +++++++
>>> .../templates/output/service_crond_enabled.xml | 33 +++++++
>>> .../templates/output/service_cups_disabled.xml | 33 +++++++
>>> .../templates/output/service_dhcpd_disabled.xml | 33 +++++++
>>> .../templates/output/service_dovecot_disabled.xml | 33 +++++++
>>> .../templates/output/service_httpd_disabled.xml | 33 +++++++
>>> .../templates/output/service_ip6tables_enabled.xml | 33 +++++++
>>> .../templates/output/service_iptables_enabled.xml | 33 +++++++
>>> .../output/service_irqbalance_enabled.xml | 33 +++++++
>>> .../templates/output/service_kdump_disabled.xml | 33 +++++++
>>> .../output/service_mdmonitor_disabled.xml | 33 +++++++
>>> .../templates/output/service_named_disabled.xml | 33 +++++++
>>> .../templates/output/service_nfs-lock_disabled.xml | 33 +++++++
>>> .../output/service_nfs-server_disabled.xml | 33 +++++++
>>> .../templates/output/service_ntpd_enabled.xml | 33 +++++++
>>> .../templates/output/service_oddjobd_disabled.xml | 33 +++++++
>>> .../output/service_portreserve_disabled.xml | 33 +++++++
>>> .../templates/output/service_postfix_enabled.xml | 33 +++++++
>>> .../templates/output/service_psacct_enabled.xml | 33 +++++++
>>> .../templates/output/service_qpidd_disabled.xml | 33 +++++++
>>> .../templates/output/service_quotaon_disabled.xml | 32 +++++++
>>> .../templates/output/service_rdisc_disabled.xml | 33 +++++++
>>> .../templates/output/service_rhnsd_disabled.xml | 99
>>> ++++++++++++++++++++
>>> .../output/service_rhsmcertd_disabled.xml | 33 +++++++
>>> .../templates/output/service_rpcgssd_disabled.xml | 33 +++++++
>>> .../output/service_rpcidmapd_disabled.xml | 33 +++++++
>>> .../output/service_rpcsvcgssd_disabled.xml | 33 +++++++
>>> .../templates/output/service_rsyslog_enabled.xml | 32 +++++++
>>> .../output/service_saslauthd_disabled.xml | 33 +++++++
>>> .../templates/output/service_smartd_disabled.xml | 33 +++++++
>>> .../templates/output/service_smb_disabled.xml | 32 +++++++
>>> .../templates/output/service_snmpd_disabled.xml | 33 +++++++
>>> .../templates/output/service_squid_disabled.xml | 33 +++++++
>>> .../templates/output/service_sshd_disabled.xml | 33 +++++++
>>> .../templates/output/service_sysstat_disabled.xml | 33 +++++++
>>> .../templates/output/service_tftp_disabled.xml | 33 +++++++
>>> .../templates/output/service_vsftpd_disabled.xml | 33 +++++++
>>> .../templates/output/service_xinetd_disabled.xml | 33 +++++++
>>> .../templates/output/service_ypbind_disabled.xml | 33 +++++++
>>> .../input/checks/templates/packages_installed.csv | 5 +-
>>> RHEL/7/input/checks/templates/packages_removed.csv | 41 ++++++++
>>> .../checks/templates/services_systemd_disabled.csv | 37 +++++++
>>> .../checks/templates/services_systemd_enabled.csv | 9 ++
>>> .../checks/templates/services_sysv_disabled.csv | 1 +
>>> .../templates/template_BASH_package_installed | 1 +
>>> .../templates/template_OVAL_package_installed | 26 +++++
>>> .../templates/template_kernel_module_disabled | 31 ++++++
>>> .../checks/templates/template_package_removed | 26 +++++
>>> .../templates/template_service_systemd_disabled | 33 +++++++
>>> .../templates/template_service_systemd_enabled | 33 +++++++
>>> .../templates/template_service_sysv_disabled | 99
>>> ++++++++++++++++++++
>>> RHEL/7/input/fixes/bash/package_dconf_installed.sh | 1 +
>>> .../bash/package_iptables-services_installed.sh | 1 +
>>> RHEL/7/transforms/idtranslate.pyc | Bin 5149 -> 5160
>>> bytes
>>> shared/oval/package_aide_installed.xml | 3 +-
>>> shared/oval/package_openssh-server_removed.xml | 1 -
>>> 271 files changed, 7160 insertions(+), 20 deletions(-)
>>> create mode 100644 RHEL/7/input/checks/kernel_module_cramfs_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/kernel_module_dccp_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/kernel_module_jffs2_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/kernel_module_rds_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/kernel_module_sctp_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/kernel_module_squashfs_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/kernel_module_udf_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/kernel_module_usb-storage_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/package_abrt_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_aide_installed.sh
>>> create mode 100644 RHEL/7/input/checks/package_at_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_audit_installed.sh
>>> create mode 100644 RHEL/7/input/checks/package_audit_installed.xml
>>> create mode 100644 RHEL/7/input/checks/package_bind_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_cpuspeed_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_cronie_installed.sh
>>> create mode 100644 RHEL/7/input/checks/package_cronie_installed.xml
>>> create mode 100644 RHEL/7/input/checks/package_cups_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_cyrus-sasl_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_dbus_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_dconf_installed.sh
>>> create mode 100644 RHEL/7/input/checks/package_dconf_installed.xml
>>> create mode 100644 RHEL/7/input/checks/package_dhcp_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_dhcpd_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_dovecot_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_hal_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_httpd_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/package_iptables-services_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/package_iptables-services_installed.xml
>>> create mode 100644 RHEL/7/input/checks/package_iptables_installed.sh
>>> create mode 100644 RHEL/7/input/checks/package_iptables_installed.xml
>>> create mode 100644 RHEL/7/input/checks/package_iputils_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_irqbalance_installed.sh
>>> create mode 100644 RHEL/7/input/checks/package_irqbalance_installed.xml
>>> create mode 100644 RHEL/7/input/checks/package_kexec-tools_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_libcgroup_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_mdadm_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_net-snmp_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_nfs-utils_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_ntp_installed.sh
>>> create mode 100644 RHEL/7/input/checks/package_ntp_installed.xml
>>> create mode 100644 RHEL/7/input/checks/package_oddjob_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/package_openldap-servers_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_pam_ldap_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/package_policycoreutils_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/package_policycoreutils_installed.xml
>>> create mode 100644 RHEL/7/input/checks/package_portreserve_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_postfix_installed.sh
>>> create mode 100644 RHEL/7/input/checks/package_postfix_installed.xml
>>> create mode 100644 RHEL/7/input/checks/package_psacct_installed.sh
>>> create mode 100644 RHEL/7/input/checks/package_psacct_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/package_qpid-cpp-server_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_quota_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_rhnsd_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_rsh-server_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_rsyslog_installed.sh
>>> create mode 100644 RHEL/7/input/checks/package_rsyslog_installed.xml
>>> create mode 100644 RHEL/7/input/checks/package_samba-common_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_screen_installed.sh
>>> create mode 100644 RHEL/7/input/checks/package_screen_installed.xml
>>> create mode 100644 RHEL/7/input/checks/package_sendmail_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_smartmontools_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_squid_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/package_subscription-manager_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_sysstat_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_talk-server_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_telnet-server_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_tftp-server_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_vsftpd_installed.sh
>>> create mode 100644 RHEL/7/input/checks/package_vsftpd_installed.xml
>>> create mode 100644 RHEL/7/input/checks/package_vsftpd_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_xinetd_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/package_xorg-x11-server-common_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_ypbind_removed.xml
>>> create mode 100644 RHEL/7/input/checks/package_ypserv_removed.xml
>>> create mode 100644 RHEL/7/input/checks/service_abrtd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_acpid_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_atd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_auditd_enabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_autofs_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_avahi-daemon_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_bluetooth_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_certmonger_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_cgconfig_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_crond_enabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_cups_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_dhcpd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_dovecot_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_httpd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_ip6tables_enabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_iptables_enabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_irqbalance_enabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_kdump_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_mdmonitor_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_named_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_nfs-lock_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_nfs-server_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_ntpd_enabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_oddjobd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_portreserve_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_postfix_enabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_psacct_enabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_qpidd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_quotaon_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_rdisc_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_rhnsd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_rhsmcertd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_rpcgssd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_rpcidmapd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_rpcsvcgssd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_rsyslog_enabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_saslauthd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_smartd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_smb_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_snmpd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_squid_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_sysstat_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_tftp_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_vsftpd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_xinetd_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/service_ypbind_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/templates/Makefile
>>> create mode 100755
>>> RHEL/7/input/checks/templates/create_kernel_modules_disabled.py
>>> create mode 100755
>>> RHEL/7/input/checks/templates/create_package_installed.py
>>> create mode 100755
>>> RHEL/7/input/checks/templates/create_package_removed.py
>>> create mode 100755
>>> RHEL/7/input/checks/templates/create_services_systemd_disabled.py
>>> create mode 100755
>>> RHEL/7/input/checks/templates/create_services_systemd_enabled.py
>>> create mode 100755
>>> RHEL/7/input/checks/templates/create_services_sysv_disabled.py
>>> create mode 100644
>>> RHEL/7/input/checks/templates/kernel_modules_disabled.csv
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/kernel_module_cramfs_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/kernel_module_dccp_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/kernel_module_jffs2_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/kernel_module_rds_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/kernel_module_sctp_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/kernel_module_squashfs_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/kernel_module_udf_disabled.xml
>>> create mode 100644
>>>
RHEL/7/input/checks/templates/output/kernel_module_usb-storage_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_abrt_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_aide_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_aide_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_at_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_audit_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_audit_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_bind_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_cpuspeed_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_cronie_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_cronie_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_cups_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_cyrus-sasl_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_dbus_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_dconf_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_dconf_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_dhcp_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_dhcpd_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_dovecot_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_hal_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_httpd_removed.xml
>>> create mode 100644
>>>
RHEL/7/input/checks/templates/output/package_iptables-services_installed.sh
>>> create mode 100644
>>>
RHEL/7/input/checks/templates/output/package_iptables-services_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_iptables_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_iptables_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_iputils_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_irqbalance_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_irqbalance_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_kexec-tools_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_libcgroup_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_mdadm_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_net-snmp_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_nfs-utils_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_ntp_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_ntp_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_oddjob_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_openldap-servers_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_openssh-server_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_pam_ldap_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_policycoreutils_installed.sh
>>> create mode 100644
>>>
RHEL/7/input/checks/templates/output/package_policycoreutils_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_portreserve_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_postfix_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_postfix_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_psacct_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_psacct_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_qpid-cpp-server_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_quota_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_rhnsd_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_rsh-server_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_rsyslog_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_rsyslog_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_samba-common_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_screen_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_screen_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_sendmail_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_smartmontools_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_squid_removed.xml
>>> create mode 100644
>>>
RHEL/7/input/checks/templates/output/package_subscription-manager_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_sysstat_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_talk-server_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_telnet-server_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_tftp-server_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_vsftpd_installed.sh
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_vsftpd_installed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_vsftpd_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_xinetd_removed.xml
>>> create mode 100644
>>>
RHEL/7/input/checks/templates/output/package_xorg-x11-server-common_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_ypbind_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/package_ypserv_removed.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_abrtd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_acpid_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_atd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_auditd_enabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_autofs_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_avahi-daemon_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_bluetooth_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_certmonger_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_cgconfig_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_crond_enabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_cups_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_dhcpd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_dovecot_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_httpd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_ip6tables_enabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_iptables_enabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_irqbalance_enabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_kdump_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_mdmonitor_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_named_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_nfs-lock_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_nfs-server_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_ntpd_enabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_oddjobd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_portreserve_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_postfix_enabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_psacct_enabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_qpidd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_quotaon_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_rdisc_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_rhnsd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_rhsmcertd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_rpcgssd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_rpcidmapd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_rpcsvcgssd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_rsyslog_enabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_saslauthd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_smartd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_smb_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_snmpd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_squid_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_sshd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_sysstat_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_tftp_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_vsftpd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_xinetd_disabled.xml
>>> create mode 100644
>>> RHEL/7/input/checks/templates/output/service_ypbind_disabled.xml
>>> create mode 100644 RHEL/7/input/checks/templates/packages_removed.csv
>>> create mode 100644
>>> RHEL/7/input/checks/templates/services_systemd_disabled.csv
>>> create mode 100644
>>> RHEL/7/input/checks/templates/services_systemd_enabled.csv
>>> create mode 100644
>>> RHEL/7/input/checks/templates/services_sysv_disabled.csv
>>> create mode 100644
>>> RHEL/7/input/checks/templates/template_BASH_package_installed
>>> create mode 100644
>>> RHEL/7/input/checks/templates/template_OVAL_package_installed
>>> create mode 100644
>>> RHEL/7/input/checks/templates/template_kernel_module_disabled
>>> create mode 100644
>>> RHEL/7/input/checks/templates/template_package_removed
>>> create mode 100644
>>> RHEL/7/input/checks/templates/template_service_systemd_disabled
>>> create mode 100644
>>> RHEL/7/input/checks/templates/template_service_systemd_enabled
>>> create mode 100644
>>> RHEL/7/input/checks/templates/template_service_sysv_disabled
>>> create mode 100644 RHEL/7/input/fixes/bash/package_dconf_installed.sh
>>> create mode 100644
>>> RHEL/7/input/fixes/bash/package_iptables-services_installed.sh
>>>
>>> _______________________________________________
>>> scap-security-guide mailing list
>>> scap-security-guide(a)lists.fedorahosted.org
>>>
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>>>
>