scap-security-guide May 2012

scap-security-guide@lists.fedorahosted.org

11 participants
43 discussions

[PATCH] transforms to handle CCIs as refs not idents
by Jeffrey Blank 02 May '12

02 May '12

This will require a quick change of the existing and significant CCIs as idents, which I will coordinate with Willy and Shawn. Again, my goof on originally keeping them as idents... Jeffrey Blank (1): changed major transforms to handle CCIs as references instead of idents rhel6/src/transforms/constants.xslt | 4 +- rhel6/src/transforms/shorthand2xccdf.xslt | 75 +++++++++++++++++++---------- rhel6/src/transforms/table-srgmap.xslt | 22 +++++++-- 3 files changed, 68 insertions(+), 33 deletions(-)

3 6

[PATCH 0/1] Changed mapping of CCI-001297
by Willy Santos 02 May '12

02 May '12

Changed mapping of CCI-001297 to aide group per Shawn Wells recommendation. Willy Santos (1): Mapped CCI-001297 to aide group per recommendation from Shawn Wells. rhel6/src/input/system/software/integrity.xml | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) -- 1.7.7.6

2 2

[PATCH 00/17] Added mappings to DISA CCI numbers
by Willy Santos 02 May '12

02 May '12

These patches contain mappings of Rules to DISA CCI Willy Santos (17): Mapped CCI-001141 to network_ssl group Mapped CCI-001436 to disable_vsftpd Mapped CCI-001436 to disable_telnet_service Mapped CCI-001436 to disable_rcp Mapped CCI-001436 to disable_rlogin Mapped CCI-001436 to disable_tftp Mapped CCI-001452 to deny_password_attempts Mapped CCI-001453 to ssh group Mapped CCI-001148 to network_ssl Mapped CCI-001589 to auditd_configure_rules Mapped CCI-001619 to password_require_specials Mapped CCI-001297 to aide_periodic_cron_checking Mapped CCI-000044 to deny_password_attempts Mapped CCI-000047 to deny_password_attempts Mapped CCI-000048 to set_system_login_banner Mapped CCI-000048 to enable_gdm_login_banner and set_gdm_login_banner_text Mapped CCI-000160 to enable_ntpd and ntpd_specify_remote_server rhel6/src/input/services/ftp.xml | 2 +- rhel6/src/input/services/ntp.xml | 4 ++++ rhel6/src/input/services/obsolete.xml | 4 ++++ rhel6/src/input/services/ssh.xml | 1 + rhel6/src/input/system/accounts/banners.xml | 6 +++--- rhel6/src/input/system/accounts/pam.xml | 4 ++-- rhel6/src/input/system/auditing.xml | 2 +- rhel6/src/input/system/network/ssl.xml | 1 + rhel6/src/input/system/software/integrity.xml | 2 +- 9 files changed, 18 insertions(+), 8 deletions(-) -- 1.7.7.6

2 35

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

scap-security-guide May 2012