On 8/22/13 2:11 PM, Robert Sanders wrote:
Quick question on this one. If I follow the prose directory then any interface on the system that doesn't have a file in /etc/sysconfig/network-scripts is a finding. On my box I've got the virbr0 and virbr0-nic interfaces due to the virtualization stuff installed. Should there be some language in here related to these virtual nics?
I've been flip flopping on this since yesterday.... Since existing STIG is for RHEL6 Servers, not RHEL6-based hypervisors, I'm inclined to say existing check should remain as is, with a net-new added for RHEL6 as a hypervisor (KVM, OpenStack, RHEV, etc).
What do you think?