>From d117304b5d97fbf8bbf1fb88df93b50978e0d2da Mon Sep 17 00:00:00 2001
From: Shawn Wells <[email protected]>
Date: Thu, 27 Sep 2012 23:54:50 -0400
Subject: [PATCH 2/8] Updated sysctl-desc-macro to check for persistent config
Historically sysctl-desc-macro only checked for runtime config, added
content to check for persistent config via sysctl.conf file
---
RHEL6/transforms/shorthand2xccdf.xslt | 3 +++
1 files changed, 3 insertions(+), 0 deletions(-)
diff --git a/RHEL6/transforms/shorthand2xccdf.xslt
b/RHEL6/transforms/shorthand2xccdf.xslt
index 1374311..11181c8 100644
--- a/RHEL6/transforms/shorthand2xccdf.xslt
+++ b/RHEL6/transforms/shorthand2xccdf.xslt
@@ -240,6 +240,9 @@ exclude-result-prefixes="xccdf xhtml">
To set the runtime status of the <xhtml:code><xsl:value-of
select="@sysctl"/></xhtml:code> kernel parameter,
run the following command:
<xhtml:pre># sysctl -w <xsl:value-of select="@sysctl"/> <xsl:value-of
select="@value"/></xhtml:pre>
+
+ To persist this configuration, the following line must be added to
<tt>/etc/sysctl.conf</tt>:
+ <xhtml:pre><xsl:value-of select="@sysctl"/> <xsl:value-of
select="@value"/></xhtml:pre>
</xsl:template>
<xsl:template match="sysctl-check-macro">
--
1.7.1
_______________________________________________
scap-security-guide mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
