scap-security-guide September 2012

scap-security-guide@lists.fedorahosted.org

18 participants
92 discussions

[PATCH] addition of OCIL check text and language revision
by David Smith 26 Sep '12

26 Sep '12

Several language and formatting changes in this one, a couple of OCIL additions, and a rationale addition. David Smith (1): inclusion of OCIL check text and modification of language RHEL6/input/system/accounts/banners.xml | 12 ++++++ RHEL6/input/system/accounts/pam.xml | 31 ++++++++++++---- RHEL6/input/system/accounts/physical.xml | 27 +++++++++----- .../accounts/restrictions/password_expiration.xml | 10 +++--- RHEL6/input/system/logging.xml | 39 +++++++++----------- RHEL6/input/system/network/ipv6.xml | 11 +++--- RHEL6/input/system/selinux.xml | 6 ++-- RHEL6/input/system/software/updating.xml | 7 ++-- 8 files changed, 87 insertions(+), 56 deletions(-)

2 2

[PATCH 1/4] OCIL clause changes for input/system/auditing.xml
by Michael J. McConachie 26 Sep '12

26 Sep '12

2 4

[PATCH] Added OCIL check text
by David Smith 26 Sep '12

26 Sep '12

added a bit more OCIL check text David Smith (1): added OCIL checks RHEL6/input/system/accounts/banners.xml | 5 +++++ RHEL6/input/system/logging.xml | 23 +++++++++++++++++++++++ RHEL6/input/system/network/ipv6.xml | 8 ++++++-- 3 files changed, 34 insertions(+), 2 deletions(-)

3 3

[PATCH 5/5] OCIL clause changes for input-system-permissions-fil.patch
by Michael J. McConachie 26 Sep '12

26 Sep '12

1 0

[PATCH 0/2] Various OCIL modifications
by David Smith 26 Sep '12

26 Sep '12

added OCIL checks and clauses David Smith (2): added or modified check text, adding OCIL clauses where appropriate added or modified check text, adding OCIL clauses where appropriate RHEL6/input/system/accounts/pam.xml | 24 +++++++++++++ RHEL6/input/system/accounts/physical.xml | 28 +++++++++++++++ .../accounts/restrictions/password_expiration.xml | 36 +++++++++++++++---- RHEL6/input/system/accounts/session.xml | 31 ++++++++++++----- RHEL6/input/system/permissions/files.xml | 20 +++++----- 5 files changed, 112 insertions(+), 27 deletions(-)

3 5

[PATCH 4/4] OCIL clause changes for input-system-permissions-fil.patch
by Michael J. McConachie 26 Sep '12

26 Sep '12

1 0

[PATCH 3/4] OCIL clause changes for input/system/network/ipv6.xml
by Michael J. McConachie 26 Sep '12

26 Sep '12

1 0

[PATCH 2/4] OCIL clause changes for input-system-network-iptable.patch
by Michael J. McConachie 26 Sep '12

26 Sep '12

1 0

[PATCH 0/4] support for alternate titles
by Jeffrey Blank 26 Sep '12

26 Sep '12

This commit set provides support for writing alternate titles for the Rules in the XCCDF content in scap-security-guide. Although this defies a strategy of leveraging a common body of high-quality SCAP content and incurs additional costs, it was expressed as a necessity. To synchronize an alternate titles file (currently only for the STIG profile): $ make alt-titles This will cause input/utils/sync-alt-titles.py to includes a placeholder for an alternate Rule title for every Rule in the specified (currently only stig-server) Profile. The short title is also included and synchronized as an aide to data entry. A new transform (xccdf-alt-titles.xslt) performs replacement of the concise, broadly-acceptable title with whatever title language is desired instead. Currently, this is activated in the Makerule table-stig. Jeffrey Blank (4): new file (alt-titles-stig.xml) that enables entering alternate titles for Rules new transform to replace concise, broadly-acceptable titles with alternative titles in XCCDF helper script to create alternate titles files and link it to Rules in a XCCDF Profile * short title is also synchronized as an aide to data entry added new Makerules to insert alternate titles, create STIG tables with them RHEL6/Makefile | 11 +- RHEL6/input/auxiliary/alt-titles-stig.xml | 455 +++++++++++++++++++++++++++++ RHEL6/transforms/xccdf-alt-titles.xslt | 36 +++ RHEL6/utils/sync-alt-titles.py | 84 ++++++ 4 files changed, 584 insertions(+), 2 deletions(-) create mode 100644 RHEL6/input/auxiliary/alt-titles-stig.xml create mode 100644 RHEL6/transforms/xccdf-alt-titles.xslt create mode 100755 RHEL6/utils/sync-alt-titles.py

5 13

[PATCH] password file entries for accounts with UID 0
by Michael J. McConachie 26 Sep '12

26 Sep '12

1 0

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

scap-security-guide September 2012