To that end, there's a link about "become a developer" on the main fedorahosted page to: https://fedorahosted.org/scap-security-guide/wiki/becomeadeveloper

There's some initial overhead, but it's worth it.  If you run into snags, please hit us up on-list (preferred) or off-list.


On Mon, Aug 26, 2013 at 12:09 AM, Shawn Wells <shawn@redhat.com> wrote:
On 8/22/13 1:32 PM, Vincenzo Pierorazio wrote:
Hey everyone -

I'm new to this project. I'm a complete novice when it comes with SCAP so please be patient haha.  I'm currently having issues with my SSH keys I believe so I've been just pulling the latest repo daily.

Welcome! What errors are you getting?



In the mean time, until I can figure out the disconnect, I believe I have some patches someone can hopefully commit.

Add a refine-value tag for the variable to accept a timeout of 15 minutes or less in the CS2 profile.
File: .\input\profiles\CS2.xml
Line: 271
<refine-value idref="sshd_idle_timeout_value" selector="15_minutes" operator="less than or equal" />

In turn, add a value of 15_minutes/900 in the check for the newly defined value above:
FIle: .\input\services\ssh.xml
Line: 18
<value selector="15_minutes">900</value>

Hopefully that makes some sense and is useful. Still trying to wrap my head around this stuff.
These profile specific changes are sane. Could you submit as a .patch?
_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide