scap-security-guide  

Messages by Date

• 2014/04/07 [PATCH] [RHEL/6] rsyslog_nolisten + system/logging.xml changes Jan Lieskovsky
• 2014/04/07 [PATCH] [RHEL/6] Don't allow whitespace around equal sign in /etc/sysconfig/init Jan Lieskovsky
• 2014/04/05 Re: CSCF-RHEL6-MLS profile Shawn Wells
• 2014/04/04 CSCF-RHEL6-MLS profile Kordell, Luke T
• 2014/04/04 RE: RHEL6 & STIG Kordell, Luke T
• 2014/04/04 Review request for couple of pending patches Jan Lieskovsky
• 2014/04/04 RHEL6 & STIG Steve Thomas
• 2014/04/03 Lastlog Implementation Kayse, Josh
• 2014/04/03 [PATCH] [RHEL/6] Don't require exact permissions on httpd directories / files (AKA allow also stronger permissions to meet the checks) Jan Lieskovsky
• 2014/04/03 Re: audit rules and -a exit,always leam hall
• 2014/04/03 audit rules and -a exit,always Steve Grubb
• 2014/04/03 [PATCH] [shared] When checking permissions on /etc/group and /etc/passwd allow also stronger permissions than just exactly 0644 Jan Lieskovsky
• 2014/04/03 [PATCH] [RHEL/6] Allow /boot/grub/grub.conf permissions to be stronger than 0600 Jan Lieskovsky
• 2014/04/02 Re: MLS_CSCF profile Shawn Wells
• 2014/04/02 Re: [PATCH] Service cgred (service name for binary cgrulesengd) is gone in RHEL 7. Maura Dailey
• 2014/04/02 Re: [PATCH] Service cgred (service name for binary cgrulesengd) is gone in RHEL 7. Jan Lieskovsky
• 2014/04/02 Re: [PATCH] Shared check was missing RHEL 7 platform line Jan Lieskovsky
• 2014/04/01 Re: [PATCH] Shared check was missing RHEL 7 platform line Maura Dailey
• 2014/04/01 Re: [PATCH] Shared check was missing RHEL 7 platform line Jan Lieskovsky
• 2014/04/01 Re: [PATCH] Service cgred (service name for binary cgrulesengd) is gone in RHEL 7. Maura Dailey
• 2014/04/01 Re: [PATCH] Service cgred (service name for binary cgrulesengd) is gone in RHEL 7. Jan Lieskovsky
• 2014/04/01 [PATCH] Fix broken references to ensure_gpgcheck_globally_activated [was: Re: ensure_gpgcheck_globally_activated] Jan Lieskovsky
• 2014/04/01 Re: ensure_gpgcheck_globally_activated Ronald
• 2014/04/01 RE: ensure_gpgcheck_globally_activated Delorenzo, Michael A CIV USARMY ARDEC (US)
• 2014/04/01 Re: ensure_gpgcheck_globally_activated Ronald
• 2014/03/31 [PATCH] Service cgred (service name for binary cgrulesengd) is gone in RHEL 7. Maura Dailey
• 2014/03/31 [PATCH] Shared check was missing RHEL 7 platform line Maura Dailey
• 2014/03/31 ensure_gpgcheck_globally_activated Delorenzo, Michael A CIV USARMY ARDEC (US)
• 2014/03/31 Re: [PATCH] Consolidate ntp and openssh package checks for Fedora, RHEL 6, and RHEL 7 into the shared directory, since they all share the same package name. Jan Lieskovsky
• 2014/03/28 [PATCH] Consolidate ntp and openssh package checks for Fedora, RHEL 6, and RHEL 7 into the shared directory, since they all share the same package name. Maura Dailey
• 2014/03/28 MLS_CSCF profile Kordell, Luke T
• 2014/03/26 Re: Minimum Password Length ... Steve Grubb
• 2014/03/26 Re: [PATCH] [RHEL/6] Introduce accounts_password_pam_cracklib_minlen OVAL check [was: Re: Minimum Password Length ...] Steve Grubb
• 2014/03/26 [PATCH] [RHEL/6] Introduce accounts_password_pam_cracklib_minlen OVAL check [was: Re: Minimum Password Length ...] Jan Lieskovsky
• 2014/03/26 Re: [PATCH 2/3] minor edits to selinux and integrity sections Shawn Wells
• 2014/03/25 Re: IPV6 and security? Andrew Gilmore
• 2014/03/25 Re: IPV6 and security? Steve Grubb
• 2014/03/25 Re: IPV6 and security? (UNCLASSIFIED) Frank Caviggia
• 2014/03/25 RE: IPV6 and security? (UNCLASSIFIED) Beavers, Randall D. CTR (US)
• 2014/03/25 Re: IPV6 and security? Andrew Gilmore
• 2014/03/25 Re: IPV6 and security? Steve Grubb
• 2014/03/25 Re: IPV6 and security? Shawn Wells
• 2014/03/25 Re: IPV6 and security? Frank Caviggia
• 2014/03/25 Re: IPV6 and security? Shawn Wells
• 2014/03/25 Re: [PATCH] Removing ntpdate as a package doesn't make sense, because it's a dependency of ntp, a package we want to be installed. It's suffient to check that the ntpdate service is not configured to start. David Smith
• 2014/03/25 IPV6 and security? Andrew Gilmore
• 2014/03/25 [PATCH] Removing ntpdate as a package doesn't make sense, because it's a dependency of ntp, a package we want to be installed. It's suffient to check that the ntpdate service is not configured to start. Maura Dailey
• 2014/03/25 Re: Minimum Password Length ... Jan Lieskovsky
• 2014/03/25 Re: Minimum Password Length ... Steve Grubb
• 2014/03/24 Re: [PATCH v2] [Fedora] Switch on OVAL variables evaluation in rules description {was: Re: [PATCH] [Fedora] Switch on OVAL variables evaluation in rules description} Shawn Wells
• 2014/03/24 Re: commit-introduction Shawn Wells
• 2014/03/24 Re: [PATCH 0/2] Remove unused, redundant package_vsftpd_installed.xml check Shawn Wells
• 2014/03/24 commit-introduction Kordell, Luke T
• 2014/03/24 [PATCH 1/2] This deletes an unnecessary check. package_vsftpd_removed is the check that is actually referenced in other OVAL definitions. Maura Dailey
• 2014/03/24 [PATCH 2/2] vsftpd should not be in packages_installed.csv. Maura Dailey
• 2014/03/24 [PATCH 0/2] Remove unused, redundant package_vsftpd_installed.xml check Maura Dailey
• 2014/03/24 [PATCH v2] [Fedora] Switch on OVAL variables evaluation in rules description {was: Re: [PATCH] [Fedora] Switch on OVAL variables evaluation in rules description} Jan Lieskovsky
• 2014/03/21 Re: [PATCH] [Fedora] Switch on OVAL variables evaluation in rules description Shawn Wells
• 2014/03/21 Re: Minimum Password Length ... Shawn Wells
• 2014/03/21 Re: Remove Me Shawn Wells
• 2014/03/21 Remove Me Pacheco, Onell CIV (US) DeCA HQ LEIMP
• 2014/03/21 Re: Minimum Password Length ... Jan Lieskovsky
• 2014/03/21 [PATCH] [Fedora] Switch on OVAL variables evaluation in rules description Jan Lieskovsky
• 2014/03/20 RE: Minimum Password Length ... Trey Henefield
• 2014/03/20 Re: Minimum Password Length ... Steve Grubb
• 2014/03/20 RE: Minimum Password Length ... Trey Henefield
• 2014/03/20 Re: xccdf:sub elements commented out Peter Vrabec
• 2014/03/19 RE: xccdf:sub elements commented out Rui Pedro Bernardino
• 2014/03/19 Re: EXTERNAL: Re: Website content fixes David Smith
• 2014/03/19 Re: EXTERNAL: Re: Website content fixes Kachigian, Christopher R
• 2014/03/19 Re: EXTERNAL: Re: Website content fixes Kachigian, Christopher R
• 2014/03/19 Re: Website content fixes David Smith
• 2014/03/19 Website content fixes Kachigian, Christopher R
• 2014/03/19 Re: [PATCH] Fix check for Red Hat Enterprise Linux 6 installed. Simon Lukasik
• 2014/03/19 Re: [PATCH] Fix check for Red Hat Enterprise Linux 6 installed. Jan Lieskovsky
• 2014/03/19 Re: xccdf:sub elements commented out Simon Lukasik
• 2014/03/18 Re: xccdf:sub elements commented out Jan Ruzicka
• 2014/03/18 xccdf:sub elements commented out Simon Lukasik
• 2014/03/18 [PATCH] Fix check for Red Hat Enterprise Linux 6 installed. Šimon Lukašík
• 2014/03/18 Re: [PATCH] Fix check for Red Hat Enterprise Linux 7 installed. Simon Lukasik
• 2014/03/18 Re: [PATCH] Fix check for Red Hat Enterprise Linux 7 installed. Jan Lieskovsky
• 2014/03/17 Unable to see list of zip files Alvarez, Angelo CIV NMFC_JTWC
• 2014/03/17 [PATCH] Fix check for Red Hat Enterprise Linux 7 installed. Šimon Lukašík
• 2014/03/17 Re: Custom epel6-ssg-repo is outdated Shawn Wells
• 2014/03/17 Custom epel6-ssg-repo is outdated Simon Lukasik
• 2014/03/13 [PATCH] Move disable_prelink OVAL check to shared Jan Lieskovsky
• 2014/03/13 Re: Choosing security policy in the installer as a proposed Fedora 21 feature Vratislav Podzimek
• 2014/03/12 Re: [Open-scap] NIST 800-53 identifiers Shawn Wells
• 2014/03/12 Re: Choosing security policy in the installer as a proposed Fedora 21 feature Shawn Wells
• 2014/03/12 [RHEL/6] Modify auditd.conf checking rules Jan Lieskovsky
• 2014/03/12 Re: [Open-scap] NIST 800-53 identifiers Simon Lukasik
• 2014/03/12 Re: NIST 800-53 identifiers Eric Smith
• 2014/03/12 Re: [Open-scap] Choosing security policy in the installer as a proposed Fedora 21 feature Simon Lukasik
• 2014/03/12 Choosing security policy in the installer as a proposed Fedora 21 feature Vratislav Podzimek
• 2014/03/11 Re: NIST 800-53 identifiers Shawn Wells
• 2014/03/11 NIST 800-53 identifiers Kordell, Luke T
• 2014/03/07 Re: [PATCH] [RHEL/6] Add heading regex anchor to cups_disable_browsing OVAL check Jan Lieskovsky
• 2014/03/07 [PATCH] [RHEL/6] logwatch splithosts / hostlimit OVAL checks changes Jan Lieskovsky
• 2014/03/07 The OSCAP Anaconda Addon 0.6 now available Vratislav Podzimek
• 2014/03/06 Re: [PATCH] [RHEL/6] Add heading regex anchor to cups_disable_browsing OVAL check Shawn Wells
• 2014/03/06 Re: [PATCH] [docs] editing of workshop content customization text Shawn Wells
• 2014/03/06 Re: [PATCH] [RHEL/6] When disabling print server capabilities search only for uncommented occurrences of Port and Listen CUPS directives Shawn Wells
• 2014/03/06 [PATCH] [RHEL/6] When disabling print server capabilities search only for uncommented occurrences of Port and Listen CUPS directives Jan Lieskovsky
• 2014/03/06 [PATCH] [docs] editing of workshop content customization text David Smith
• 2014/03/06 [PATCH] [RHEL/6] Add heading regex anchor to cups_disable_browsing OVAL check Jan Lieskovsky
• 2014/03/05 Re: [PATCH 0/3] minor edits in preparation for publication David Smith
• 2014/03/05 [PATCH 2/3] minor edits to selinux and integrity sections Jeffrey Blank
• 2014/03/05 [PATCH 3/3] minor edit to intro text Jeffrey Blank
• 2014/03/05 [PATCH 0/3] minor edits in preparation for publication Jeffrey Blank
• 2014/03/05 [PATCH 1/3] minor edits to permissions section text Jeffrey Blank
• 2014/03/05 Re: [PATCH][docs] editing the SSG workbook David Smith
• 2014/03/05 Re: [PATCH][docs] editing the SSG workbook Shawn Wells
• 2014/03/05 [PATCH][docs] editing the SSG workbook David Smith
• 2014/03/05 Re: [PATCH] [bugfix] updated SCAP Workshop docbook Shawn Wells
• 2014/03/05 Re: [PATCH] [bugfix] updated SCAP Workshop docbook David Smith
• 2014/03/05 [PATCH] [bugfix] updated SCAP Workshop docbook Shawn Wells
• 2014/03/05 Re: [PATCH] [RHEL/6] When checking GRUB bootloader security ("password" directive being present in grub.conf configuration file) succeed only in case there's uncommented occurrence present Jan Lieskovsky
• 2014/03/05 Re: [PATCH] [RHEL/6] When checking GRUB bootloader security ("password" directive being present in grub.conf configuration file) succeed only in case there's uncommented occurrence present Shawn Wells
• 2014/03/05 [PATCH] [RHEL/6] When checking GRUB bootloader security ("password" directive being present in grub.conf configuration file) succeed only in case there's uncommented occurrence present Jan Lieskovsky
• 2014/03/03 Re: [Open-scap] Ignoring SCAP content in the OAA Vratislav Podzimek
• 2014/03/03 Re: Ignoring SCAP content in the OAA Vratislav Podzimek
• 2014/03/03 Re: [Open-scap] Ignoring SCAP content in the OAA Shawn Wells
• 2014/03/03 Re: [PATCH] [shared] When checking /etc/passwd file for presence of non-root usernames having UID 0 consider also case where hashed passwords can be stored directly in /etc/passwd file. [Fedora] Use shared version of the 'UID 0 Belongs Only To Root' check. Shawn Wells
• 2014/03/03 [PATCH] [shared] When checking /etc/passwd file for presence of non-root usernames having UID 0 consider also case where hashed passwords can be stored directly in /etc/passwd file. [Fedora] Use shared version of the 'UID 0 Belongs Only To Root' check. Jan Lieskovsky
• 2014/03/03 Re: Ignoring SCAP content in the OAA Jan Lieskovsky
• 2014/02/28 Re: [RFC] time to move to github? Jeff Bachtel
• 2014/02/27 Re: [PATCH] [RFC] Updated RHEL6 manpage to reflect U.S. gov usage + RHT support claims Shawn Wells
• 2014/02/27 Re: SSG for RHEL 6 (UNCLASSIFIED) Jeffrey Blank
• 2014/02/27 [PATCH] [Fedora] Fix fedora-srpm and fedora-rpm Make targets to work again Jan Lieskovsky
• 2014/02/27 Re: [PATCH] [RFC] Updated RHEL6 manpage to reflect U.S. gov usage + RHT support claims Jan Lieskovsky
• 2014/02/26 Re: [PATCH] [RFC] Updated RHEL6 manpage to reflect U.S. gov usage + RHT support claims David Smith
• 2014/02/26 [PATCH] [RFC] Updated RHEL6 manpage to reflect U.S. gov usage + RHT support claims Shawn Wells
• 2014/02/26 RE: SSG for RHEL 6 (UNCLASSIFIED) Moessbauer, David
• 2014/02/26 Re: [PATCH] [Fedora] Include RHEL-6 and RHEL-7 datastreams into Fedora RPM package [Fedora] Bump version to 0.1.5 Shawn Wells
• 2014/02/26 [PATCH] [Fedora] Include RHEL-6 and RHEL-7 datastreams into Fedora RPM package [Fedora] Bump version to 0.1.5 Jan Lieskovsky
• 2014/02/26 RE: SSG for RHEL 6 (UNCLASSIFIED) Burns, Robert K (US SSA)
• 2014/02/26 RE: SSG for RHEL 6 (UNCLASSIFIED) Burns, Robert K (US SSA)
• 2014/02/26 RE: SSG for RHEL 6 (UNCLASSIFIED) Margaret M Sanders
• 2014/02/26 Minimum Password Length ... Trey Henefield
• 2014/02/26 Re: EXTERNAL: SSG for RHEL 6 (UNCLASSIFIED) Lee Kinser
• 2014/02/26 Re: Ignoring SCAP content in the OAA Lee Kinser
• 2014/02/26 Re: EXTERNAL: SSG for RHEL 6 (UNCLASSIFIED) leam hall
• 2014/02/26 Re: EXTERNAL: SSG for RHEL 6 (UNCLASSIFIED) Brian Peake
• 2014/02/26 RE: SSG for RHEL 6 (UNCLASSIFIED) Haynes, Dan
• 2014/02/26 Ignoring SCAP content in the OAA Vratislav Podzimek
• 2014/02/25 Re: EXTERNAL: SSG for RHEL 6 (UNCLASSIFIED) Kachigian, Christopher R
• 2014/02/25 RE: SSG for RHEL 6 (UNCLASSIFIED) Burns, Robert K (US SSA)
• 2014/02/25 Re: SSG for RHEL 6 (UNCLASSIFIED) Shawn Wells
• 2014/02/25 [PATCH] RHEL7 systemd support y
• 2014/02/25 SSG for RHEL 6 (UNCLASSIFIED) Bailey, Christopher D CTR USARMY AMRDEC (US)
• 2014/02/25 Re: Handling dconf Settings Maura Dailey
• 2014/02/25 Re: Handling dconf Settings Steve Grubb
• 2014/02/25 Re: Handling dconf Settings Maura Dailey
• 2014/02/25 Re: Handling dconf Settings Steve Grubb
• 2014/02/24 Re: Handling dconf Settings Steve Grubb
• 2014/02/24 Re: Handling dconf Settings Steve Grubb
• 2014/02/24 Re: Handling dconf Settings Shawn Wells
• 2014/02/24 Handling dconf Settings Maura Dailey
• 2014/02/24 Re: [PATCH] [shared] sshd_set_idle_timeout - when doing the check be sure to check also the lower bound of ClientAliveInterval value. Shawn Wells
• 2014/02/24 Re: [RFC] time to move to github? Gary Gapinski
• 2014/02/24 Re: [RFC] time to move to github? Jan Lieskovsky
• 2014/02/24 [PATCH] [shared] sshd_set_idle_timeout - when doing the check be sure to check also the lower bound of ClientAliveInterval value. Jan Lieskovsky
• 2014/02/24 Re: [PATCH] Remove byte-compiled versions of idtranslate.pyc from RHEL/7 and shared transforms directories. Make .gitignore in shared/oval to be more general. Shawn Wells
• 2014/02/24 Re: [PATCH] RHEL7 systemd support Jan Lieskovsky
• 2014/02/21 [PATCH] RHEL7 systemd support Maura Dailey
• 2014/02/21 [PATCH] Remove byte-compiled versions of idtranslate.pyc from RHEL/7 and shared transforms directories. Make .gitignore in shared/oval to be more general. Jan Lieskovsky
• 2014/02/21 Re: [PATCH 0/3] Added datastream outputs for Fedora, RHEL7, RHEL6 Jan Lieskovsky
• 2014/02/21 [PATCH] [RHEL] Include datastream files into RHEL6 and RHEL7 RPM packages too [RHEL] Bump version to 0.1-16 Jan Lieskovsky
• 2014/02/21 Re: [RFC] time to move to github? Gary Gapinski
• 2014/02/21 Re: [PATCH 0/3] Added datastream outputs for Fedora, RHEL7, RHEL6 Jan Lieskovsky
• 2014/02/21 Re: [PATCH 0/3] Added datastream outputs for Fedora, RHEL7, RHEL6 Jan Lieskovsky
• 2014/02/21 Re: [PATCH] [Fedora] Shift list of supported Fedora releases by one up (Fedora 18 got EOL 2014-01-14) Jan Lieskovsky
• 2014/02/21 Re: [PATCH] [Fedora] Include datastream file (for remote system scans) into RPM package too Jan Lieskovsky
• 2014/02/20 Re: [PATCH] [Fedora] Shift list of supported Fedora releases by one up (Fedora 18 got EOL 2014-01-14) Shawn Wells
• 2014/02/20 Re: [PATCH 0/3] Added datastream outputs for Fedora, RHEL7, RHEL6 Shawn Wells
• 2014/02/20 Re: [PATCH 0/3] Added datastream outputs for Fedora, RHEL7, RHEL6 Martin Preisler
• 2014/02/20 Re: [PATCH 0/3] Added datastream outputs for Fedora, RHEL7, RHEL6 Shawn Wells
• 2014/02/20 Re: [PATCH] [Fedora] Include datastream file (for remote system scans) into RPM package too Shawn Wells
• 2014/02/20 Re: [PATCH 0/3] Added datastream outputs for Fedora, RHEL7, RHEL6 Jan Lieskovsky
• 2014/02/20 [PATCH] [Fedora] Include datastream file (for remote system scans) into RPM package too Jan Lieskovsky
• 2014/02/20 [PATCH] [Fedora] Shift list of supported Fedora releases by one up (Fedora 18 got EOL 2014-01-14) Jan Lieskovsky
• 2014/02/20 Re: [RFC] time to move to github? Jan Lieskovsky
• 2014/02/20 Re: [RFC] time to move to github? Martin Preisler
• 2014/02/20 Re: [RFC] time to move to github? Greg Elin
• 2014/02/20 Re: [RFC] time to move to github? Jan Lieskovsky
• 2014/02/20 Re: [RFC] time to move to github? Gary Gapinski
• 2014/02/19 Re: Looking to start contributing Shawn Wells
• 2014/02/19 Re: [PATCH] [RHEL/7] Fix 'make validate' error caused by missing two OVAL checks definitions Shawn Wells
• 2014/02/19 Re: [RFC] time to move to github? Shawn Wells
• 2014/02/19 Re: [PATCH 0/3] Added datastream outputs for Fedora, RHEL7, RHEL6 Shawn Wells
• 2014/02/19 Re: [RFC] time to move to github? Gary Gapinski
• 2014/02/19 Re: [RFC] time to move to github? Simon Lukasik
• 2014/02/19 Re: [RFC] time to move to github? Jeffrey Blank
• 2014/02/19 RE: [RFC] time to move to github? Steinke, Leland J Sr CTR DISA FSO (US)
• 2014/02/19 Re: [RFC] time to move to github? Shawn Wells
• 2014/02/19 Re: [RFC] time to move to github? Greg Elin
• 2014/02/19 Re: [RFC] time to move to github? Spencer Shimko
• 2014/02/19 Re: [RFC] time to move to github? Jeffrey Blank
• 2014/02/19 Re: [PATCH 3/3] Added datastream output for RHEL7 Jan Lieskovsky
• 2014/02/19 Re: [PATCH 2/3] Updated Fedora build process to generate datastream Jan Lieskovsky

• Later messages