Just wanted to let you know that I've updated this section. Thanks for letting me know.
On Wed, Jan 4, 2017 at 11:19 AM, Nathanael D. Noblet <[email protected]> wrote: > Hello, > > I was just skimming the server scan results and noticed the > following. I haven't the foggiest idea what it could imply but seemed > odd. > > Under https://github.com/trevor-vaughan/ssg-scans/blob/master/2016-12-2 > 2-rhel-7-draft-stig-simp-6.0.0-Alpha-server-with-puppet-enterprise- > report.md#configure-periodic-execution-of-aide > > It talks about enabling aide via cron, but the Notes have this: > > 32 5 * * 0 /bin/nice -n 19 /usr/bin/clamscan -l /var/log/clamscan.log > --official-db-only=yes -r --no-summary -i --bytecode-timeout=60000 -- > max-files=10000 --max-filesize=25M --max-scansize=100M --max- > recursion=16 --max-dir-recursion=15 /tmp /var/tmp /dev/shm > > Which seems completely unrelated to aide... > > -- > Nathanael > > On Tue, 2017-01-03 at 22:48 -0500, Shawn Wells wrote: > > > > On 1/3/17 3:24 PM, Trevor Vaughan wrote: > > > Hi All, > > > > > > We've recently finished running the Draft RHEL 7 STIG against an > > > instance of SIMP running atop Puppet Enterprise and thought that > > > the > > > results might be of interest. > > > > > > The server scan can be found > > > at: https://github.com/trevor-vaughan/ssg-scans/blob/master/2016-12 > > > -22-rhel-7-draft-stig-simp-6.0.0-Alpha-server-with-puppet- > > > enterprise-report.md > > > > > > The client scan can be found > > > at: https://github.com/trevor-vaughan/ssg-scans/blob/master/2016-12 > > > -22-rhel-7-draft-stig-simp-6.0.0-Alpha-client-report.md > > > > > > We would certainly be interested in discussion regarding any items > > > marked with "Suggest SSG Feedback" and we will be incorporating the > > > reports into our core documentation right after we fix the > > > findings. > > > > > > On a slightly side note, I'm now collecting banners for SIMP, if > > > you > > > have one you'd like to donate, PRs are most welcome > > > to https://github.com/simp/pupmod-simp-issue (look in the 'files' > > > directory). > > > > > > > Holy crap, this feedback looks awesome! Wanted to acknowledge we got > > it.... but you'll likely find responses slow as most @redhat.com > > staff > > returned today from 1-1.5 weeks of corporate holiday shutdown. Thanks > > for starting the thread! Speaking for myself, I'll likely have time > > to > > review (in detail) Thursday. > > _______________________________________________ > > scap-security-guide mailing list -- [email protected] > > osted.org > > To unsubscribe send an email to [email protected] > > ahosted.org > > -- Trevor Vaughan Vice President, Onyx Point, Inc (410) 541-6699 x788 -- This account not approved for unencrypted proprietary information --
_______________________________________________ scap-security-guide mailing list -- [email protected] To unsubscribe send an email to [email protected]
