Signed-off-by: Jeffrey Blank <bl...@eclipse.ncsc.mil> --- RHEL6/input/profiles/STIG-server.xml | 2 ++ RHEL6/input/profiles/common.xml | 1 - 2 files changed, 2 insertions(+), 1 deletions(-)
diff --git a/RHEL6/input/profiles/STIG-server.xml b/RHEL6/input/profiles/STIG-server.xml index 2350dd0..b361774 100644 --- a/RHEL6/input/profiles/STIG-server.xml +++ b/RHEL6/input/profiles/STIG-server.xml @@ -2,6 +2,8 @@ <title>Pre-release Draft STIG for RHEL 6 Server</title> <description>This profile is being developed under the DoD consensus model to become a STIG in coordination with DISA FSO.</description> +<select idref="rpm_verify_permissions" selected="true"/> + <select idref="install_antivirus" selected="true"/> <select idref="install_hids" selected="true"/> diff --git a/RHEL6/input/profiles/common.xml b/RHEL6/input/profiles/common.xml index a5108f6..d240dbd 100644 --- a/RHEL6/input/profiles/common.xml +++ b/RHEL6/input/profiles/common.xml @@ -12,7 +12,6 @@ <select idref="ensure_gpgcheck_globally_activated" selected="true"/> <select idref="ensure_gpgcheck_never_disabled" selected="true"/> <select idref="install_aide" selected="true"/> -<!--<select idref="rpm_verify_permissions" selected="true"/>--> <select idref="enable_selinux_bootloader" selected="true"/> <select idref="no_rsh_trust_files" selected="true"/> <select idref="set_selinux_state" selected="true"/> -- 1.7.1 _______________________________________________ scap-security-guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
