New Member Intro

[Vincenzo Pierorazio]

Hey everyone -

I'm new to this project. I'm a complete novice when it comes with SCAP so
please be patient haha.  I'm currently having issues with my SSH keys I
believe so I've been just pulling the latest repo daily. In the mean time,
until I can figure out the disconnect, I believe I have some patches
someone can hopefully commit.

Add a refine-value tag for the variable to accept a timeout of 15 minutes
or less in the CS2 profile.
File: .\input\profiles\CS2.xml
Line: 271
<refine-value idref="sshd_idle_timeout_value" selector="15_minutes"
operator="less than or equal" />

In turn, add a value of 15_minutes/900 in the check for the newly defined
value above:
FIle: .\input\services\ssh.xml
Line: 18
<value selector="15_minutes">900</value>

Hopefully that makes some sense and is useful. Still trying to wrap my head
around this stuff.

Thanks!

[Shawn Wells]

On 8/22/13 1:32 PM, Vincenzo Pierorazio wrote:
> Hey everyone -
>
> I'm new to this project. I'm a complete novice when it comes with SCAP 
> so please be patient haha.  I'm currently having issues with my SSH 
> keys I believe so I've been just pulling the latest repo daily.

Welcome! What errors are you getting?
> In the mean time, until I can figure out the disconnect, I believe I 
> have some patches someone can hopefully commit.
>
> Add a refine-value tag for the variable to accept a timeout of 15 
> minutes or less in the CS2 profile.
> File: .\input\profiles\CS2.xml
> Line: 271
> <refine-value idref="sshd_idle_timeout_value" selector="15_minutes" 
> operator="less than or equal" />
>
> In turn, add a value of 15_minutes/900 in the check for the newly 
> defined value above:
> FIle: .\input\services\ssh.xml
> Line: 18
> <value selector="15_minutes">900</value>
>
> Hopefully that makes some sense and is useful. Still trying to wrap my 
> head around this stuff.

These profile specific changes are sane. Could you submit as a .patch?

[Jeffrey Blank]

To that end, there's a link about "become a developer" on the main
fedorahosted page to:
https://fedorahosted.org/scap-security-guide/wiki/becomeadeveloper

There's some initial overhead, but it's worth it.  If you run into snags,
please hit us up on-list (preferred) or off-list.

On Mon, Aug 26, 2013 at 12:09 AM, Shawn Wells  wrote:
> On 8/22/13 1:32 PM, Vincenzo Pierorazio wrote:
> > Hey everyone -
> >
> > I'm new to this project. I'm a complete novice when it comes with SCAP so
> > please be patient haha.  I'm currently having issues with my SSH keys I
> > believe so I've been just pulling the latest repo daily.
>
> Welcome! What errors are you getting?
>
> In the mean time, until I can figure out the disconnect, I believe I have
> > some patches someone can hopefully commit.
> >
> > Add a refine-value tag for the variable to accept a timeout of 15 minutes
> > or less in the CS2 profile.
> > File: .\input\profiles\CS2.xml
> > Line: 271
> > <refine-value idref="sshd_idle_timeout_**value" selector="15_minutes"
> > operator="less than or equal" />
> >
> > In turn, add a value of 15_minutes/900 in the check for the newly defined
> > value above:
> > FIle: .\input\services\ssh.xml
> > Line: 18
> > <value selector="15_minutes">900</**value>
> >
> > Hopefully that makes some sense and is useful. Still trying to wrap my
> > head around this stuff.
>
> These profile specific changes are sane. Could you submit as a .patch?
> ______________________________**_________________
> scap-security-guide mailing list
> scap-security-guide@lists.**fedorahosted.org
> https://lists.fedorahosted.**org/mailman/listinfo/scap-**security-guidehttps://lists.fedorahosted.org/mailman/listinfo/scap-security-guide