The cups checks as written would not accept valid equivalents for certain 
checks.

- Administrators might have configured non standard ports for CUPS (not 631)
- The Listen directive should accept localhost or 127.0.0.1 as a host name
- BrowseAllow won't appear by default when configured by the GUI, since the 
default value is none
- Although the GUI and other documentation says that Browsing should be set to 
On or Off, the man page specifies the value is Yes or No

Maura Dailey (1):
  Loosening up some of the checks to allow for non standard ports and
    equivalent values as allowed by the man page

 RHEL6/input/checks/cups_disable_browsing.xml    |   47 ++++++++++++-----------
 RHEL6/input/checks/cups_disable_printserver.xml |   32 +++++-----------
 2 files changed, 35 insertions(+), 44 deletions(-)

_______________________________________________
scap-security-guide mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

Reply via email to