I'd like to push to the repo. Is this patch ACK-worthy? ________________________________________ From: scap-security-guide-bounces@lists.fedorahosted.org [scap-security-guide-bounces@lists.fedorahosted.org] on behalf of Michael Palmiotto [mpalmiotto@tresys.com] Sent: Friday, April 27, 2012 9:12 AM To: scap-security-guide@lists.fedorahosted.org Subject: [PATCH v2] M1 Incomplete Guidance - Proxy
Prose and OVAL checks for Proxy.
Michael Palmiotto (1): M1 Incomplete Guidance - Proxy
.../service_squid_acls_configured_filemaker.xml | 40 ++ .../checks/service_squid_acls_configured_ftp.xml | 40 ++ .../service_squid_acls_configured_gopher.xml | 40 ++ .../service_squid_acls_configured_gss_http.xml | 40 ++ .../service_squid_acls_configured_http-mgmt.xml | 40 ++ .../checks/service_squid_acls_configured_http.xml | 40 ++ .../checks/service_squid_acls_configured_https.xml | 40 ++ .../service_squid_acls_configured_localhost.xml | 30 ++ .../service_squid_acls_configured_multiling.xml | 40 ++ .../checks/service_squid_acls_configured_wais.xml | 40 ++ .../service_squid_authentication_configured.xml | 30 ++ ...ervice_squid_default_insecure_forwarded_for.xml | 30 ++ .../service_squid_default_insecure_log_mime.xml | 30 ++ ...id_default_insecure_suppress_version_string.xml | 30 ++ .../service_squid_default_insecure_underscore.xml | 30 ++ .../input/checks/service_squid_logs_forwarded.xml | 30 ++ .../checks/service_squid_privileges_lowered.xml | 70 +++ .../checks/squid_default_secure_cache_group.xml | 30 ++ .../checks/squid_default_secure_cache_user.xml | 30 ++ .../checks/squid_default_secure_hostnames.xml | 30 ++ .../input/checks/squid_default_secure_passive.xml | 30 ++ .../checks/squid_default_secure_reply_header.xml | 30 ++ .../checks/squid_default_secure_request_header.xml | 30 ++ .../input/checks/squid_default_secure_sanity.xml | 30 ++ .../squid_default_secured_ignore_unknown.xml | 30 ++ .../input/checks/system_proxy_access_allowed.xml | 30 ++ rhel6/src/input/profiles/common.xml | 39 ++- rhel6/src/input/services/squid.xml | 536 ++++++++++++++++++++ 28 files changed, 1476 insertions(+), 9 deletions(-) create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_filemaker.xml create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_ftp.xml create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_gopher.xml create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_gss_http.xml create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_http-mgmt.xml create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_http.xml create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_https.xml create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_localhost.xml create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_multiling.xml create mode 100644 rhel6/src/input/checks/service_squid_acls_configured_wais.xml create mode 100644 rhel6/src/input/checks/service_squid_authentication_configured.xml create mode 100644 rhel6/src/input/checks/service_squid_default_insecure_forwarded_for.xml create mode 100644 rhel6/src/input/checks/service_squid_default_insecure_log_mime.xml create mode 100644 rhel6/src/input/checks/service_squid_default_insecure_suppress_version_string.xml create mode 100644 rhel6/src/input/checks/service_squid_default_insecure_underscore.xml create mode 100644 rhel6/src/input/checks/service_squid_logs_forwarded.xml create mode 100644 rhel6/src/input/checks/service_squid_privileges_lowered.xml create mode 100644 rhel6/src/input/checks/squid_default_secure_cache_group.xml create mode 100644 rhel6/src/input/checks/squid_default_secure_cache_user.xml create mode 100644 rhel6/src/input/checks/squid_default_secure_hostnames.xml create mode 100644 rhel6/src/input/checks/squid_default_secure_passive.xml create mode 100644 rhel6/src/input/checks/squid_default_secure_reply_header.xml create mode 100644 rhel6/src/input/checks/squid_default_secure_request_header.xml create mode 100644 rhel6/src/input/checks/squid_default_secure_sanity.xml create mode 100644 rhel6/src/input/checks/squid_default_secured_ignore_unknown.xml create mode 100644 rhel6/src/input/checks/system_proxy_access_allowed.xml
-- 1.7.6.5
_______________________________________________ scap-security-guide mailing list scap-security-guide@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/scap-security-guide