ACK -- thanks. I hadn't chirped up in time, but I suppose it could also be okay for the OVAL to pass you if you're using true or false.
In any event, good to see some consistency, and the XCCDF certainly needed the update. On 01/24/2013 01:59 PM, Mike Palmiotto wrote: > The community has decided to use a consistent mechanism for disabling kernel > modules. Currently there is a mixture of `alias [kernel_module] off,` > `install [kernel_module] /bin/true,` and `install [kernel_module] /bin/false.` > > This patch makes all instances of kernel module disabling consistently use: > `install [kernel_module] /bin/false.` > > Mike Palmiotto (1): > Change kernel module disabling to use /bin/false. > > RHEL6/input/checks/kernel_module_bluetooth_disabled.xml | 4 ++-- > RHEL6/input/checks/kernel_module_cramfs_disabled.xml | 2 +- > RHEL6/input/checks/kernel_module_dccp_disabled.xml | 2 +- > RHEL6/input/checks/kernel_module_freevxfs_disabled.xml | 2 +- > RHEL6/input/checks/kernel_module_hfs_disabled.xml | 2 +- > RHEL6/input/checks/kernel_module_hfsplus_disabled.xml | 2 +- > RHEL6/input/checks/kernel_module_jffs2_disabled.xml | 2 +- > RHEL6/input/checks/kernel_module_rds_disabled.xml | 2 +- > RHEL6/input/checks/kernel_module_sctp_disabled.xml | 2 +- > RHEL6/input/checks/kernel_module_squashfs_disabled.xml | 2 +- > RHEL6/input/checks/kernel_module_tipc_disabled.xml | 2 +- > RHEL6/input/checks/kernel_module_udf_disabled.xml | 2 +- > RHEL6/input/checks/kernel_module_usb-storage_disabled.xml | 2 +- > RHEL6/input/checks/templates/template_kernel_module_disabled | 2 +- > RHEL6/input/system/network/wireless.xml | 4 ++-- > 15 files changed, 17 insertions(+), 17 deletions(-) > _______________________________________________ scap-security-guide mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
