scap-security-guide

Settings | Report Duplicate

0

I Use This!

Very High Activity

Commits : Listings

Analyzed about 15 hours ago. based on code collected about 15 hours ago.

Commit Message	Contributor	Files Modified	Lines Added	Lines Removed	Code Location	Date
Dec 10, 2024 — Dec 10, 2025 Showing page 1,400 of 1,402 Search / Filter on:
implemented check "mount_option_dev_shm_nodev" * checks for string 'nodev' on /dev/shm line within /etc/fstab	Michael Moseley	More...				about 14 years ago
adjusted "accounts_maximum_age_login_defs" description to annotate that this check specifically looks for "PASS_MAX_DAYS 60"	Michael Moseley	More...				about 14 years ago
resolved "NEEDS_FIXUP" in "sysctl_ipv6_router_ra" * checks to see if ipv6 capability disabled in kernel (sysctl_net_ipv6_disabled OR kernel_module_ipv6_option_disabled) * checks if net.ipv6.conf.all.accept_ra_defrtr = 0 in /etc/sysctl.conf	Michael Moseley	More...				about 14 years ago
improved check "kernel_module_ipv6_option_disabled" * now checks for "options ipv6 disable=1" in any *.conf file in /etc/modprobe.d	Michael Moseley	More...				about 14 years ago
created new check "sysctl_net_ipv6_disabled" * checks /etc/sysctl.conf for "net.ipv6.conf.all.disable_ipv6 = 1"	Michael Moseley	More...				about 14 years ago
Merge branch 'master' of git://git.fedorahosted.org/git/scap-security-guide	Jeffrey Blank	More...				about 14 years ago
created some new definition files -- package must exist if service to be checked * renamed others for consistency	Jeffrey Blank	More...				about 14 years ago
resolved many "NEEDS_FIXUP" notes, providing dependent definitions * many checks use <extend_definition>, and now these defs should exist * renamed some definitions/files to be more consistent * changed rcp to rexec -- a supported obsolete service to be disabled	Jeffrey Blank	More...				about 14 years ago
This reverts commit a291a3dbd6ca600395c962ddbe828f9022a73a1a.	Michael Moseley	More...				about 14 years ago
fixed bugs in testcheck.py to reset global variables for each file executed	Jeffrey Blank	More...				about 14 years ago
systemic fixes in checks: changing product name to RHEL 6, removing linebreaks from regexes	Jeffrey Blank	More...				about 14 years ago
fixed up transform for generation of table with Rules-Reference mapping	Jeff Blank	More...				about 14 years ago
added a new transform that enables adding specified profiles to the XCCDF document * xsltproc can pass a command line variable to the stylesheet to specify which profile is desired, or "allprofiles"	Jeff Blank	More...				about 14 years ago
Adding missing / to close oval tag	Maura Dailey	More...				about 14 years ago
Adding missing = to Rule id	Maura Dailey	More...				about 14 years ago
added many check-export statements to XCCDF (shorthand is "oval value=")	Jeffrey Blank	More...				about 14 years ago
added new OVAL checks for SSH package installation, service running	Jeffrey Blank	More...				about 14 years ago
updated variable names and rule names in desktop profile	Jeffrey Blank	More...				about 14 years ago
I modified a couple of sections within the intro and I briefly discussed verifying packages with RPM.	Michael Moseley	More...				about 14 years ago
Made one more small change regarding iptables and ip6tables.	Michael Moseley	More...				about 14 years ago
I have fleshed out the discussion regarding iptables and ip6tables within the "Base Services" section of the guide.	Michael Moseley	More...				about 14 years ago
I added a section on "saslauthd" in the "Base Services" section. I also added a section regarding layer 2 and layer 3 tunneling with OpenSSH. This capability should be disabled unless it is absolutely needed.	Michael Moseley	More...				about 14 years ago
I have added a section that discusses disabling extraneous authentication schemes in OpenSSH.	Michael Moseley	More...				about 14 years ago
Merge branch 'master' of git://git.fedorahosted.org/git/scap-security-guide	Jeffrey Blank	More...				about 14 years ago
added new README to describe purpose of each directory	Jeffrey Blank	More...				about 14 years ago
removed old README, added some check-export values, minor comment fixups	Jeffrey Blank	More...				about 14 years ago
added transform to pass check-export elements from the shorthand to XCCDF	Jeffrey Blank	More...				about 14 years ago
removed deployment_resources directory, as Aqueduct is the place for that	Jeffrey Blank	More...				about 14 years ago
I corrected a few errors and added a couple of new sections within the "Base Services" section.	Michael Moseley	More...				about 14 years ago
I worked on the "Base Services" section within the RHEL 6 security guide. I specifically changed the following files:	Michael Moseley	More...				about 14 years ago

←
1
2
…
1394
1395
1396
1397
1398
1399
1400
1401
1402
→