scap-security-guide September 2012

scap-security-guide@lists.fedorahosted.org

18 participants
92 discussions

[PATCH 0/5] manual check text
by Jeffrey Blank 24 Sep '12

24 Sep '12

This commitset includes manual check text for most Rules in the project, and macros to make maintenance of these easier. It has already been committed, so I invite other contributors to pull. Jeffrey Blank (5): added shorthand2xccdf dependency to tables Makerule added new macros for file permissions, kernel modules, audit rules removed superceded checks for client-side NIS checks * superceded by requirement to not use NIS at all added check text to services sections added check text to system section

2 10

[PATCH 00/16] changed rules/groups where applicable, CUPS and Xorg content update
by David Smith 23 Sep '12

23 Sep '12

This may affect some profiles, which will be addressed next week. David Smith (16): quick fix to make things validate content editing for CUPS changed a rule to a group removed obsolete settings added new transform to validly order nodes inside Groups style updates to software updates section changing coarse-grained recommendations to Groups for DHCP changing HOWTO information about OpenSSL into Groups changed coarse-grained recommendations to Groups for BIND changed coarse-grained discussion to Groups for FTP changed HOWTO information for OpenLDAP server to Groups changed discussions about Postfix to Groups changed firewall discussion about SSH to a Group fixed indenting, reassigned Groups/Rules in Samba guidance changed a coarse discussion about SNMP to a Group changed wide-ranging discussion about IPtables rules to Group RHEL6/input/services/avahi.xml | 4 +- RHEL6/input/services/dhcp.xml | 41 +++++--- RHEL6/input/services/dns.xml | 164 +++++++++++++++++++++--------- RHEL6/input/services/ftp.xml | 8 +- RHEL6/input/services/ldap.xml | 22 ++-- RHEL6/input/services/mail.xml | 16 ++-- RHEL6/input/services/obsolete.xml | 21 +++-- RHEL6/input/services/printing.xml | 122 +++++++++------------- RHEL6/input/services/smb.xml | 124 ++++++++++++++++------- RHEL6/input/services/snmp.xml | 11 +- RHEL6/input/services/ssh.xml | 4 +- RHEL6/input/services/xorg.xml | 61 +----------- RHEL6/input/system/network/iptables.xml | 12 +- RHEL6/input/system/network/ssl.xml | 106 ++++++++++++-------- RHEL6/input/system/software/updating.xml | 74 +++++++------- RHEL6/transforms/shorthand2xccdf.xslt | 14 +++ 16 files changed, 445 insertions(+), 359 deletions(-)

3 18

[PATCH 14/14] Created OCIL for max_concurrent_login_sessions
by Shawn Wells 23 Sep '12

23 Sep '12

1 0

[PATCH 06/14] Created OCIL for user_umask_logindefs
by Shawn Wells 23 Sep '12

23 Sep '12

1 0

[PATCH 05/14] Created OCIL for user_umask_profile
by Shawn Wells 23 Sep '12

23 Sep '12

1 0

[PATCH 04/14] Created OCIL for user_umask_cshrc
by Shawn Wells 23 Sep '12

23 Sep '12

1 0

[PATCH 03/14] Created OCIL for user_umask_bashrc
by Shawn Wells 23 Sep '12

23 Sep '12

1 0

[PATCH 02/14] Created OCIL for no_netrc_files
by Shawn Wells 23 Sep '12

23 Sep '12

1 0

[PATCH 01/14] Created OCIL for ftp_present_banner
by Shawn Wells 23 Sep '12

23 Sep '12

1 0

[PATCH] Various Check text entries for SSST
by Michael J. McConachie 21 Sep '12

21 Sep '12

2 4

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

scap-security-guide September 2012