[PATCH 1/2] modified remediation text for disabling anacron

[David Smith]

---
 RHEL/6/input/services/cron.xml |   14 ++++++++------
 1 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/RHEL/6/input/services/cron.xml b/RHEL/6/input/services/cron.xml
index 983d9ed..b859dc0 100644
--- a/RHEL/6/input/services/cron.xml
+++ b/RHEL/6/input/services/cron.xml
@@ -25,16 +25,18 @@ enabling the cron daemon is essential.
 
 <Rule id="disable_anacron">
 <title>Disable anacron Service</title>
-<description>The <tt>cronie-anacron</tt> package which provides
anacron
-functionality is installed by default. To disable <tt>anacron</tt> support,
-run the following commands:
-<pre># yum install cronie-noanacron
-# yum erase cronie-anacron</pre>
+<description>The <tt>cronie-anacron</tt> package, which provides
<tt>anacron</tt>
+functionality, is installed by default. 
+<package-remove-macro package="cronie-anacron" />
+</description>
+<ocil><package-check-macro package="cronie-anacron"
/></ocil>
+<rationale>
 The <tt>anacron</tt> service provides <tt>cron</tt> functionality
for systems
 such as laptops and workstations that may be shut down during the normal times
 that <tt>cron</tt> jobs are scheduled to run. On systems which do not require
this
 additional functionality, <tt>anacron</tt> could needlessly increase the
possible
-attack surface for an intruder.</description>
+attack surface for an intruder.
+</rationale>
 <ref nist="CM-7" />
 <ident cce="27158-5" />
 </Rule>
-- 
1.7.1

[PATCH 2/2] Bugfix - fixing typo ('Red Hat' instead of 'Red Had')

[David Smith]

---
 RHEL/6/input/system/software/disk_partitioning.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL/6/input/system/software/disk_partitioning.xml
b/RHEL/6/input/system/software/disk_partitioning.xml
index 54b45ae..a2c5914 100644
--- a/RHEL/6/input/system/software/disk_partitioning.xml
+++ b/RHEL/6/input/system/software/disk_partitioning.xml
@@ -147,7 +147,7 @@ Omitting the <tt>--passphrase=</tt> option from the
partition definition will ca
 installer to pause and interactively ask for the passphrase during installation.
 <br /><br />
 Detailed information on encrypting partitions using LUKS can be found on
-the Red Had Documentation web site:<br />
+the Red Hat Documentation web site:<br />

https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Securi...
 </description>
 <ocil clause="encryption must be used and is not employed">
-- 
1.7.1

[PATCH 2/2] Bugfix - fixing typo ('Red Hat' instead of 'Red Had')

[Shawn Wells]

On 6/9/14, 10:09 AM, David Smith wrote:
>  ---
>    RHEL/6/input/system/software/disk_partitioning.xml |    2 +-
>    1 files changed, 1 insertions(+), 1 deletions(-)
>
>  diff --git a/RHEL/6/input/system/software/disk_partitioning.xml
> b/RHEL/6/input/system/software/disk_partitioning.xml
>  index 54b45ae..a2c5914 100644
>  --- a/RHEL/6/input/system/software/disk_partitioning.xml
>  +++ b/RHEL/6/input/system/software/disk_partitioning.xml
>  @@ -147,7 +147,7 @@ Omitting the <tt>--passphrase=</tt> option from the
> partition definition will ca
>    installer to pause and interactively ask for the passphrase during installation.
>    <br /><br />
>    Detailed information on encrypting partitions using LUKS can be found on
>  -the Red Had Documentation web site:<br />
>  +the Red Hat Documentation web site:<br />
>   
> https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Securi...
>    </description>
>    <ocil clause="encryption must be used and is not employed"> 
ack

[PATCH 2/2] Bugfix - fixing typo ('Red Hat' instead of 'Red Had')

[Hayden,Robert]

If not too late, can you also correct the typo in the phrase "partition definition
will ca installer to pause"?


Robert Hayden


-----Original Message-----
From: scap-security-guide-bounces(a)lists.fedorahosted.org
[mailto:[e-mail]] On Behalf Of David Smith
Sent: Monday, June 09, 2014 12:10 PM
To: scap-security-guide(a)lists.fedorahosted.org
Subject: [PATCH 2/2] Bugfix - fixing typo ('Red Hat' instead of 'Red
Had')

---
 RHEL/6/input/system/software/disk_partitioning.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL/6/input/system/software/disk_partitioning.xml
b/RHEL/6/input/system/software/disk_partitioning.xml
index 54b45ae..a2c5914 100644
--- a/RHEL/6/input/system/software/disk_partitioning.xml
+++ b/RHEL/6/input/system/software/disk_partitioning.xml
@@ -147,7 +147,7 @@ Omitting the <tt>--passphrase=</tt> option from the
partition definition will ca  installer to pause and interactively ask for the passphrase
during installation.
 <br /><br />
 Detailed information on encrypting partitions using LUKS can be found on -the Red Had
Documentation web site:<br />
+the Red Hat Documentation web site:<br />

https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Securi...
 </description>
 <ocil clause="encryption must be used and is not employed">
--
1.7.1

_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

CONFIDENTIALITY NOTICE This message and any included attachments are from Cerner
Corporation and are intended only for the addressee. The information contained in this
message is confidential and may constitute inside or non-public information under
international, federal, or state securities laws. Unauthorized forwarding, printing,
copying, distribution, or use of such information is strictly prohibited and may be
unlawful. If you are not the addressee, please promptly delete this message and notify the
sender of the delivery error by e-mail or you may call Cerner's corporate offices in
Kansas City, Missouri, U.S.A at (+1) [phone].

[Shawn Wells]

On 6/9/14, 10:09 AM, David Smith wrote:
>  ---
>    RHEL/6/input/services/cron.xml |   14 ++++++++------
>    1 files changed, 8 insertions(+), 6 deletions(-)
>
>  diff --git a/RHEL/6/input/services/cron.xml b/RHEL/6/input/services/cron.xml
>  index 983d9ed..b859dc0 100644
>  --- a/RHEL/6/input/services/cron.xml
>  +++ b/RHEL/6/input/services/cron.xml
>  @@ -25,16 +25,18 @@ enabling the cron daemon is essential.
>    
>    <Rule id="disable_anacron">
>    <title>Disable anacron Service</title>
>  -<description>The <tt>cronie-anacron</tt> package which provides
> anacron
>  -functionality is installed by default. To disable <tt>anacron</tt> support,
>  -run the following commands:
>  -<pre># yum install cronie-noanacron
>  -# yum erase cronie-anacron</pre>
>  +<description>The <tt>cronie-anacron</tt> package, which provides
> <tt>anacron</tt>
>  +functionality, is installed by default.
>  +<package-remove-macro package="cronie-anacron" />
>  +</description>
>  +<ocil><package-check-macro package="cronie-anacron"
> /></ocil>
>  +<rationale>
>    The <tt>anacron</tt> service provides <tt>cron</tt>
> functionality for systems
>    such as laptops and workstations that may be shut down during the normal times
>    that <tt>cron</tt> jobs are scheduled to run. On systems which do not
> require this
>    additional functionality, <tt>anacron</tt> could needlessly increase the
> possible
>  -attack surface for an intruder.</description>
>  +attack surface for an intruder.
>  +</rationale>
>    <ref nist="CM-7" />
>    <ident cce="27158-5" />
>    </Rule> 
ack