On 9/27/13 5:38 PM, Tony James wrote:

0001-OVAL-signoff-on-service_rhnsd_disabled.xml.patch


 From 7c449cf51e09694274e596b5d46c790000cabaf7 Mon Sep 17 00:00:00 2001
From: Tony James<[email protected]>
Date: Fri, 27 Sep 2013 17:23:56 -0400
Subject: [PATCH] OVAL signoff on service_rhnsd_disabled.xml

[tony@rhel6 checks]$ ./testcheck.py service_rhnsd_disabled.xml
Evaluating with OVAL tempfile : /tmp/service_rhnsd_disabled4jfbEx.xml
Writing results to : /tmp/service_rhnsd_disabled4jfbEx.xml-results
Definition oval:scap-security-guide.testing:def:101: false
Definition oval:scap-security-guide.testing:def:100: false
Evaluation done.
[tony@rhel6 checks]$ chkconfig rhnsd off
You do not have enough privileges to perform this operation.
[tony@rhel6 checks]$ sudo chkconfig rhnsd off
[tony@rhel6 checks]$ ./testcheck.py service_rhnsd_disabled.xml
Evaluating with OVAL tempfile : /tmp/service_rhnsd_disabledbWy4lJ.xml
Writing results to : /tmp/service_rhnsd_disabledbWy4lJ.xml-results
Definition oval:scap-security-guide.testing:def:101: false
Definition oval:scap-security-guide.testing:def:100: true
Evaluation done.
[tony@rhel6 checks]$ sudo service rhnsd stop
Stopping Red Hat Network Daemon:                           [  OK  ]
[tony@rhel6 checks]$ ./testcheck.py service_rhnsd_disabled.xml
Evaluating with OVAL tempfile : /tmp/service_rhnsd_disabledrq9CRE.xml
Writing results to : /tmp/service_rhnsd_disabledrq9CRE.xml-results
Definition oval:scap-security-guide.testing:def:101: false
Definition oval:scap-security-guide.testing:def:100: true
Evaluation done.
---
  RHEL6/input/checks/service_rhnsd_disabled.xml |    1 +
  1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/RHEL6/input/checks/service_rhnsd_disabled.xml 
b/RHEL6/input/checks/service_rhnsd_disabled.xml
index ff0779f..240ed80 100644
--- a/RHEL6/input/checks/service_rhnsd_disabled.xml
+++ b/RHEL6/input/checks/service_rhnsd_disabled.xml
@@ -8,6 +8,7 @@
          <platform>Red Hat Enterprise Linux 6</platform>
        </affected>
        <description>The rhnsd service should be disabled if 
possible.</description>
+      <reference source="tony" ref_id="20130927" ref_url="test_attestation"/>
      </metadata>
     <criteria comment="package rhnsd removed or service rhnsd is not configured to start" 
operator="OR">
      <extend_definition comment="rhnsd removed" 
definition_ref="package_rhnsd_removed" />
-- 1.7.1
finally getting off your rear and becoming a commiter, eh? ;) welcome!

ack
_______________________________________________
scap-security-guide mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

Reply via email to