On 9/30/12 12:34 AM, Michael J. McConachie wrote:
0006-Test-Tags-added-for-input-system-software-integrity..patch
From 6a21c4829551eca4b5baad7f04e49fc7a5ffc72f Mon Sep 17 00:00:00 2001 From: Michael McConachiemichael@redhat.com Date: Sun, 30 Sep 2012 00:31:30 -0400 Subject: [PATCH 6/6] Test Tags added for input/system/software/integrity.xml
RHEL6/input/system/software/integrity.xml | 1 + 1 file changed, 1 insertion(+)
diff --git a/RHEL6/input/system/software/integrity.xml b/RHEL6/input/system/software/integrity.xml index 65ed613..93aa9dd 100644 --- a/RHEL6/input/system/software/integrity.xml +++ b/RHEL6/input/system/software/integrity.xml @@ -38,6 +38,7 @@ The AIDE package must be installed if it is to be available for integrity checki
<ident cce="4209-3" /> <oval id="package_aide_installed" /> <ref nist="CM-6, CM-7, SC-28, SI-7" /> +<tested by="MM" on="20120929"/> </Rule>
<Rule id="disable_prelink"> --
nack
OCIL text written incorrectly, making it a finding if AIDE is installed. OCIL text should read "if the package is /not/ installed..."
scap-security-guide@lists.fedorahosted.org