scap-security-guide November 2012

scap-security-guide@lists.fedorahosted.org

16 participants
35 discussions

Start a nNew thread

[PATCH 07/13] DISA FSO provided copy editing of RHEL6/input/services/ftp.xml
by Shawn Wells 16 Nov '12

16 Nov '12

2 1

[PATCH 06/13] DISA FSO provided copy editing of RHEL6/input/services/dns.xml
by Shawn Wells 16 Nov '12

16 Nov '12

2 1

[PATCH 05/13] DISA FSO provided copy editing of RHEL6/input/services/dhcp.xml
by Shawn Wells 16 Nov '12

16 Nov '12

2 1

[PATCH 04/13] DISA FSO copy editing of RHEL6/input/services/cron.xml
by Shawn Wells 16 Nov '12

16 Nov '12

1 1

[PATCH 03/13] DISA FSO
by Shawn Wells 16 Nov '12

16 Nov '12

2 1

[PATCH 02/13] Further auxiliary titles copy editing
by Shawn Wells 16 Nov '12

16 Nov '12

2 1

[PATCH 01/13] DISA FSO
by Shawn Wells 16 Nov '12

16 Nov '12

2 1

Invalid Output using the scap-security-guide-0.1-6.noarch.rpm
by Bueschel, Eric W CTR (US) 12 Nov '12

12 Nov '12

Just upgraded from the 0.1-1 rpm to the 0.1-6 rpm. System is a RHEL 6.3 system, openscap-utils is version 8.0. I am attempting to run, from the /usr/share/xml/scap//ssg/content directory: oscap xccdf eval --profile server --results xccdf-results.xml ssg-rhel6-xccdf.xml I have also tried the stig-server profile. In each case the results field is "null". It also generates multiple errors at the end of the eval: 1 1871 In file 'xccdf-results.xml' on line 15992: Element '{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected. Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ). 1 1871 In file 'xccdf-results.xml' on line 15995: Element '{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected. Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ). 1 1871 In file 'xccdf-results.xml' on line 15998: Element '{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected. Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ). 1 1871 In file 'xccdf-results.xml' on line 16001: Element '{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected. Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ). 1 1871 In file 'xccdf-results.xml' on line 16008: Element '{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected. Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ). 1 1871 In file 'xccdf-results.xml' on line 16011: Element '{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected. Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ). 1 1871 In file 'xccdf-results.xml' on line 16014: Element '{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected. Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ). 1 1871 In file 'xccdf-results.xml' on line 16769: Element '{http://checklists.nist.gov/xccdf/1.1}TestResult': Missing child element(s). Expected is one of ( {http://checklists.nist.gov/xccdf/1.1}rule-result, {http://checklists.nist.gov/xccdf/1.1}score ). XCCDF Results are NOT exported correctly. OpenSCAP Error: Selector ID(ensure_logrotate_activated) does not exist in Benchmark. The prior version, 0.1-1, generated a useful output which I was able to convert to a useable document with: oscap xccdf generate report xccdf-results.xml > $HOSTNAME-openscap.html I would appreciate any help possible, Eric B

6 26

[PATCH 01/10] Added example command.
by Michele Newman 03 Nov '12

03 Nov '12

--- RHEL6/input/system/accounts/pam.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/RHEL6/input/system/accounts/pam.xml b/RHEL6/input/system/accounts/pam.xml index ce0f202..dec081f 100644 --- a/RHEL6/input/system/accounts/pam.xml +++ b/RHEL6/input/system/accounts/pam.xml @@ -438,6 +438,7 @@ This is the default. Inspect the <tt>password</tt> section of <tt>/etc/pam.d/system-auth</tt> and ensure that the <tt>pam_unix.so</tt> module includes the argument <tt>sha512</tt>. +<tt># grep sha512 /etc/pam.d/system-auth</tt> </ocil> <rationale> Using a stronger hashing algorithm makes password cracking attacks more difficult. -- 1.8.0

2 20

[PATCH 1/4] removing scratch files
by Shawn Wells 01 Nov '12

01 Nov '12

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

scap-security-guide November 2012