Signed-off-by: David Smith <[email protected]>
---
.../sysctl_net_ipv4_conf_all_accept_redirects.xml | 1 +
...ysctl_net_ipv4_conf_all_accept_source_route.xml | 1 +
.../sysctl_net_ipv4_conf_all_log_martians.xml | 1 +
.../sysctl_net_ipv4_conf_all_secure_redirects.xml | 1 +
.../sysctl_net_ipv4_conf_all_send_redirects.xml | 1 +
...l_net_ipv4_conf_default_accept_source_route.xml | 1 +
...sysctl_net_ipv4_conf_default_send_redirects.xml | 1 +
RHEL6/input/checks/sysctl_net_ipv4_ip_forward.xml | 1 +
8 files changed, 8 insertions(+), 0 deletions(-)
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_redirects.xml
b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_redirects.xml
index a975c3f..c013d27 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_redirects.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_redirects.xml
@@ -7,6 +7,7 @@
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
<description>The kernel runtime parameter
"net.ipv4.conf.all.accept_redirects" should be set to "0".</description>
+ <reference source="DS" ref_id="20130920" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="kernel runtime parameter
net.ipv4.conf.all.accept_redirects set to 0"
test_ref="test_sysctl_net_ipv4_conf_all_accept_redirects" />
diff --git
a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_source_route.xml
b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_source_route.xml
index 6c88e98..e3e163b 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_source_route.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_accept_source_route.xml
@@ -7,6 +7,7 @@
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
<description>The kernel runtime parameter
"net.ipv4.conf.all.accept_source_route" should be set to "0".</description>
+ <reference source="DS" ref_id="20130920" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="kernel runtime parameter
net.ipv4.conf.all.accept_source_route set to 0"
test_ref="test_sysctl_net_ipv4_conf_all_accept_source_route" />
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_log_martians.xml
b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_log_martians.xml
index 460d1d6..e11092f 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_log_martians.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_log_martians.xml
@@ -7,6 +7,7 @@
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
<description>The kernel runtime parameter
"net.ipv4.conf.all.log_martians" should be set to "1".</description>
+ <reference source="DS" ref_id="20130920" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="kernel runtime parameter
net.ipv4.conf.all.log_martians set to 1"
test_ref="test_sysctl_net_ipv4_conf_all_log_martians" />
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_secure_redirects.xml
b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_secure_redirects.xml
index a9ff005..251cb42 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_secure_redirects.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_secure_redirects.xml
@@ -7,6 +7,7 @@
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
<description>The kernel runtime parameter
"net.ipv4.conf.all.secure_redirects" should be set to "0".</description>
+ <reference source="DS" ref_id="20130920" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="kernel runtime parameter
net.ipv4.conf.all.secure_redirects set to 0"
test_ref="test_sysctl_net_ipv4_conf_all_secure_redirects" />
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_send_redirects.xml
b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_send_redirects.xml
index 7a21347..55ce654 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_all_send_redirects.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_all_send_redirects.xml
@@ -7,6 +7,7 @@
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
<description>The kernel runtime parameter
"net.ipv4.conf.all.send_redirects" should be set to "0".</description>
+ <reference source="DS" ref_id="20130920" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="kernel runtime parameter
net.ipv4.conf.all.send_redirects set to 0"
test_ref="test_sysctl_net_ipv4_conf_all_send_redirects" />
diff --git
a/RHEL6/input/checks/sysctl_net_ipv4_conf_default_accept_source_route.xml
b/RHEL6/input/checks/sysctl_net_ipv4_conf_default_accept_source_route.xml
index 3f54b26..28c6602 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_default_accept_source_route.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_default_accept_source_route.xml
@@ -7,6 +7,7 @@
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
<description>The kernel runtime parameter
"net.ipv4.conf.default.accept_source_route" should be set to "0".</description>
+ <reference source="DS" ref_id="20130920" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="kernel runtime parameter
net.ipv4.conf.default.accept_source_route set to 0"
test_ref="test_sysctl_net_ipv4_conf_default_accept_source_route" />
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_conf_default_send_redirects.xml
b/RHEL6/input/checks/sysctl_net_ipv4_conf_default_send_redirects.xml
index c2db75b..261d26a 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_conf_default_send_redirects.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_conf_default_send_redirects.xml
@@ -7,6 +7,7 @@
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
<description>The kernel runtime parameter
"net.ipv4.conf.default.send_redirects" should be set to "0".</description>
+ <reference source="DS" ref_id="20130919" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="kernel runtime parameter
net.ipv4.conf.default.send_redirects set to 0"
test_ref="test_sysctl_net_ipv4_conf_default_send_redirects" />
diff --git a/RHEL6/input/checks/sysctl_net_ipv4_ip_forward.xml
b/RHEL6/input/checks/sysctl_net_ipv4_ip_forward.xml
index 96f0948..2203ade 100644
--- a/RHEL6/input/checks/sysctl_net_ipv4_ip_forward.xml
+++ b/RHEL6/input/checks/sysctl_net_ipv4_ip_forward.xml
@@ -7,6 +7,7 @@
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
<description>The kernel runtime parameter "net.ipv4.ip_forward" should
be set to "0".</description>
+ <reference source="DS" ref_id="20130919" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="kernel runtime parameter net.ipv4.ip_forward set to
0" test_ref="test_sysctl_net_ipv4_ip_forward" />
--
1.7.1
_______________________________________________
scap-security-guide mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
