|
 |
fe0dde |
From 43223c64eb10feefa4e7946173b6bdcb33974461 Mon Sep 17 00:00:00 2001
|
|
|
fe0dde |
From: Gabriel Becker <ggasparb@redhat.com>
|
|
|
fe0dde |
Date: Wed, 23 Sep 2020 14:47:27 +0200
|
|
|
fe0dde |
Subject: [PATCH 1/3] Fix snmpd_not_default_password ansible remediation when
|
|
|
fe0dde |
file doesn't exist.
|
|
|
fe0dde |
|
|
|
fe0dde |
---
|
|
|
fe0dde |
.../snmpd_not_default_password/ansible/shared.yml | 7 +++++++
|
|
|
fe0dde |
1 file changed, 7 insertions(+)
|
|
|
fe0dde |
|
|
|
fe0dde |
diff --git a/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/ansible/shared.yml b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/ansible/shared.yml
|
|
|
fe0dde |
index d92c0a17da..9094560a1d 100644
|
|
|
fe0dde |
--- a/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/ansible/shared.yml
|
|
|
fe0dde |
+++ b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/ansible/shared.yml
|
|
|
fe0dde |
@@ -6,14 +6,21 @@
|
|
|
fe0dde |
|
|
|
fe0dde |
{{{ ansible_instantiate_variables("var_snmpd_ro_string", "var_snmpd_rw_string") }}}
|
|
|
fe0dde |
|
|
|
fe0dde |
+- name: "Check if file /etc/snmp/snmpd.conf exists"
|
|
|
fe0dde |
+ stat:
|
|
|
fe0dde |
+ path: /etc/snmp/snmpd.conf
|
|
|
fe0dde |
+ register: snmpd
|
|
|
fe0dde |
+
|
|
|
fe0dde |
- name: "Replace all instances of SNMP RO strings"
|
|
|
fe0dde |
replace:
|
|
|
fe0dde |
path: "/etc/snmp/snmpd.conf"
|
|
|
fe0dde |
regexp: 'public'
|
|
|
fe0dde |
replace: '{{ var_snmpd_ro_string }}'
|
|
|
fe0dde |
+ when: snmpd.stat is defined and snmpd.stat.exists
|
|
|
fe0dde |
|
|
|
fe0dde |
- name: "Replace all instances of SNMP RW strings"
|
|
|
fe0dde |
replace:
|
|
|
fe0dde |
path: "/etc/snmp/snmpd.conf"
|
|
|
fe0dde |
regexp: 'private'
|
|
|
fe0dde |
replace: '{{ var_snmpd_rw_string }}'
|
|
|
fe0dde |
+ when: snmpd.stat is defined and snmpd.stat.exists
|
|
|
fe0dde |
|
|
|
fe0dde |
From 459d15b2fc2a86d37588cbebbbe1732910e1a397 Mon Sep 17 00:00:00 2001
|
|
|
fe0dde |
From: Gabriel Becker <ggasparb@redhat.com>
|
|
|
fe0dde |
Date: Thu, 24 Sep 2020 14:06:48 +0200
|
|
|
fe0dde |
Subject: [PATCH 2/3] Add net-snmp CPE entry to detect if package is installed.
|
|
|
fe0dde |
|
|
|
fe0dde |
---
|
|
|
fe0dde |
debian10/cpe/debian10-cpe-dictionary.xml | 4 ++
|
|
|
fe0dde |
debian10/product.yml | 4 ++
|
|
|
fe0dde |
debian9/cpe/debian9-cpe-dictionary.xml | 4 ++
|
|
|
fe0dde |
debian9/product.yml | 4 ++
|
|
|
fe0dde |
fedora/cpe/fedora-cpe-dictionary.xml | 4 ++
|
|
|
fe0dde |
.../snmp/snmp_configure_server/group.yml | 2 +
|
|
|
fe0dde |
.../ansible/shared.yml | 4 +-
|
|
|
fe0dde |
.../oval/shared.xml | 3 +-
|
|
|
fe0dde |
.../tests/missing.pass.sh | 3 ++
|
|
|
fe0dde |
.../tests/package_missing.notapplicable.sh | 3 ++
|
|
|
fe0dde |
ol7/cpe/ol7-cpe-dictionary.xml | 4 ++
|
|
|
fe0dde |
ol8/cpe/ol8-cpe-dictionary.xml | 4 ++
|
|
|
fe0dde |
rhel6/cpe/rhel6-cpe-dictionary.xml | 4 ++
|
|
|
fe0dde |
rhel7/cpe/rhel7-cpe-dictionary.xml | 4 ++
|
|
|
fe0dde |
rhel8/cpe/rhel8-cpe-dictionary.xml | 4 ++
|
|
|
fe0dde |
.../installed_env_has_net-snmp_package.xml | 38 +++++++++++++++++++
|
|
|
fe0dde |
ssg/constants.py | 1 +
|
|
|
fe0dde |
.../cpe/wrlinux1019-cpe-dictionary.xml | 4 ++
|
|
|
fe0dde |
18 files changed, 94 insertions(+), 4 deletions(-)
|
|
|
fe0dde |
create mode 100644 linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/tests/missing.pass.sh
|
|
|
fe0dde |
create mode 100644 linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/tests/package_missing.notapplicable.sh
|
|
|
fe0dde |
create mode 100644 shared/checks/oval/installed_env_has_net-snmp_package.xml
|
|
|
fe0dde |
|
|
|
fe0dde |
diff --git a/debian10/cpe/debian10-cpe-dictionary.xml b/debian10/cpe/debian10-cpe-dictionary.xml
|
|
|
fe0dde |
index ddb68c34bd..f94c59d028 100644
|
|
|
fe0dde |
--- a/debian10/cpe/debian10-cpe-dictionary.xml
|
|
|
fe0dde |
+++ b/debian10/cpe/debian10-cpe-dictionary.xml
|
|
|
fe0dde |
@@ -76,4 +76,8 @@
|
|
|
fe0dde |
<title xml:lang="en-us">System uses zipl</title>
|
|
|
fe0dde |
<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_zipl_package</check>
|
|
|
fe0dde |
</cpe-item>
|
|
|
fe0dde |
+ <cpe-item name="cpe:/a:net-snmp">
|
|
|
fe0dde |
+ <title xml:lang="en-us">Package net-snmp is installed</title>
|
|
|
fe0dde |
+ <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_net-snmp_package</check>
|
|
|
fe0dde |
+ </cpe-item>
|
|
|
fe0dde |
</cpe-list>
|
|
|
fe0dde |
diff --git a/debian10/product.yml b/debian10/product.yml
|
|
|
fe0dde |
index c9b30b9d23..88fb497eb0 100644
|
|
|
fe0dde |
--- a/debian10/product.yml
|
|
|
fe0dde |
+++ b/debian10/product.yml
|
|
|
fe0dde |
@@ -9,3 +9,7 @@ profiles_root: "./profiles"
|
|
|
fe0dde |
pkg_manager: "apt_get"
|
|
|
fe0dde |
|
|
|
fe0dde |
init_system: "systemd"
|
|
|
fe0dde |
+
|
|
|
fe0dde |
+# Mapping of CPE platform to package
|
|
|
fe0dde |
+platform_package_overrides:
|
|
|
fe0dde |
+ net-snmp: "snmp"
|
|
|
fe0dde |
diff --git a/debian9/cpe/debian9-cpe-dictionary.xml b/debian9/cpe/debian9-cpe-dictionary.xml
|
|
|
fe0dde |
index d5595fd594..bd18e5e754 100644
|
|
|
fe0dde |
--- a/debian9/cpe/debian9-cpe-dictionary.xml
|
|
|
fe0dde |
+++ b/debian9/cpe/debian9-cpe-dictionary.xml
|
|
|
fe0dde |
@@ -76,4 +76,8 @@
|
|
|
fe0dde |
<title xml:lang="en-us">System uses zipl</title>
|
|
|
fe0dde |
<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_zipl_package</check>
|
|
|
fe0dde |
</cpe-item>
|
|
|
fe0dde |
+ <cpe-item name="cpe:/a:net-snmp">
|
|
|
fe0dde |
+ <title xml:lang="en-us">Package net-snmp is installed</title>
|
|
|
fe0dde |
+ <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_net-snmp_package</check>
|
|
|
fe0dde |
+ </cpe-item>
|
|
|
fe0dde |
</cpe-list>
|
|
|
fe0dde |
diff --git a/debian9/product.yml b/debian9/product.yml
|
|
|
fe0dde |
index 53e4e7509a..cfbdfd109a 100644
|
|
|
fe0dde |
--- a/debian9/product.yml
|
|
|
fe0dde |
+++ b/debian9/product.yml
|
|
|
fe0dde |
@@ -9,3 +9,7 @@ profiles_root: "./profiles"
|
|
|
fe0dde |
pkg_manager: "apt_get"
|
|
|
fe0dde |
|
|
|
fe0dde |
init_system: "systemd"
|
|
|
fe0dde |
+
|
|
|
fe0dde |
+# Mapping of CPE platform to package
|
|
|
fe0dde |
+platform_package_overrides:
|
|
|
fe0dde |
+ net-snmp: "snmp"
|
|
|
fe0dde |
diff --git a/fedora/cpe/fedora-cpe-dictionary.xml b/fedora/cpe/fedora-cpe-dictionary.xml
|
|
|
fe0dde |
index bef1337fc9..581abc41c7 100644
|
|
|
fe0dde |
--- a/fedora/cpe/fedora-cpe-dictionary.xml
|
|
|
fe0dde |
+++ b/fedora/cpe/fedora-cpe-dictionary.xml
|
|
|
fe0dde |
@@ -111,4 +111,8 @@
|
|
|
fe0dde |
<title xml:lang="en-us">System uses zipl</title>
|
|
|
fe0dde |
<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_zipl_package</check>
|
|
|
fe0dde |
</cpe-item>
|
|
|
fe0dde |
+ <cpe-item name="cpe:/a:net-snmp">
|
|
|
fe0dde |
+ <title xml:lang="en-us">Package net-snmp is installed</title>
|
|
|
fe0dde |
+ <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_net-snmp_package</check>
|
|
|
fe0dde |
+ </cpe-item>
|
|
|
fe0dde |
</cpe-list>
|
|
|
fe0dde |
diff --git a/linux_os/guide/services/snmp/snmp_configure_server/group.yml b/linux_os/guide/services/snmp/snmp_configure_server/group.yml
|
|
|
fe0dde |
index 339e5843c2..8052ade2f6 100644
|
|
|
fe0dde |
--- a/linux_os/guide/services/snmp/snmp_configure_server/group.yml
|
|
|
fe0dde |
+++ b/linux_os/guide/services/snmp/snmp_configure_server/group.yml
|
|
|
fe0dde |
@@ -17,3 +17,5 @@ description: |-
|
|
|
fe0dde |
stations
|
|
|
fe0dde |
ensure that permissions on the <tt>snmpd.conf</tt> configuration file (by default, in <tt>/etc/snmp</tt>) are 640 or more restrictive
|
|
|
fe0dde |
ensure that any MIB files' permissions are also 640 or more restrictive
|
|
|
fe0dde |
+
|
|
|
fe0dde |
+platform: net-snmp
|
|
|
fe0dde |
diff --git a/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/ansible/shared.yml b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/ansible/shared.yml
|
|
|
fe0dde |
index 9094560a1d..b10733861d 100644
|
|
|
fe0dde |
--- a/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/ansible/shared.yml
|
|
|
fe0dde |
+++ b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/ansible/shared.yml
|
|
|
fe0dde |
@@ -16,11 +16,11 @@
|
|
|
fe0dde |
path: "/etc/snmp/snmpd.conf"
|
|
|
fe0dde |
regexp: 'public'
|
|
|
fe0dde |
replace: '{{ var_snmpd_ro_string }}'
|
|
|
fe0dde |
- when: snmpd.stat is defined and snmpd.stat.exists
|
|
|
fe0dde |
+ when: (snmpd.stat.exists is defined and snmpd.stat.exists)
|
|
|
fe0dde |
|
|
|
fe0dde |
- name: "Replace all instances of SNMP RW strings"
|
|
|
fe0dde |
replace:
|
|
|
fe0dde |
path: "/etc/snmp/snmpd.conf"
|
|
|
fe0dde |
regexp: 'private'
|
|
|
fe0dde |
replace: '{{ var_snmpd_rw_string }}'
|
|
|
fe0dde |
- when: snmpd.stat is defined and snmpd.stat.exists
|
|
|
fe0dde |
+ when: (snmpd.stat.exists is defined and snmpd.stat.exists)
|
|
|
fe0dde |
diff --git a/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/oval/shared.xml b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/oval/shared.xml
|
|
|
fe0dde |
index 0ff056c48c..5504c0151f 100644
|
|
|
fe0dde |
--- a/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/oval/shared.xml
|
|
|
fe0dde |
+++ b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/oval/shared.xml
|
|
|
fe0dde |
@@ -1,8 +1,7 @@
|
|
|
fe0dde |
<def-group>
|
|
|
fe0dde |
<definition class="compliance" id="snmpd_not_default_password" version="2">
|
|
|
fe0dde |
{{{ oval_metadata("SNMP default communities must be removed.") }}}
|
|
|
fe0dde |
- <criteria operator="OR">
|
|
|
fe0dde |
- <extend_definition comment="SMNP installed" definition_ref="package_net-snmp_removed" />
|
|
|
fe0dde |
+ <criteria>
|
|
|
fe0dde |
<criterion comment="SNMP communities" test_ref="test_snmp_default_communities" />
|
|
|
fe0dde |
</criteria>
|
|
|
fe0dde |
</definition>
|
|
|
fe0dde |
diff --git a/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/tests/missing.pass.sh b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/tests/missing.pass.sh
|
|
|
fe0dde |
new file mode 100644
|
|
|
fe0dde |
index 0000000000..3982740e83
|
|
|
fe0dde |
--- /dev/null
|
|
|
fe0dde |
+++ b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/tests/missing.pass.sh
|
|
|
fe0dde |
@@ -0,0 +1,3 @@
|
|
|
fe0dde |
+#!/bin/bash
|
|
|
fe0dde |
+
|
|
|
fe0dde |
+yum -y install net-snmp
|
|
|
fe0dde |
diff --git a/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/tests/package_missing.notapplicable.sh b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/tests/package_missing.notapplicable.sh
|
|
|
fe0dde |
new file mode 100644
|
|
|
fe0dde |
index 0000000000..c388fe3652
|
|
|
fe0dde |
--- /dev/null
|
|
|
fe0dde |
+++ b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/tests/package_missing.notapplicable.sh
|
|
|
fe0dde |
@@ -0,0 +1,3 @@
|
|
|
fe0dde |
+#!/bin/bash
|
|
|
fe0dde |
+
|
|
|
fe0dde |
+yum -y remove net-snmp
|
|
|
fe0dde |
diff --git a/ol7/cpe/ol7-cpe-dictionary.xml b/ol7/cpe/ol7-cpe-dictionary.xml
|
|
|
fe0dde |
index 59c5c728aa..6b1ab98ab6 100644
|
|
|
fe0dde |
--- a/ol7/cpe/ol7-cpe-dictionary.xml
|
|
|
fe0dde |
+++ b/ol7/cpe/ol7-cpe-dictionary.xml
|
|
|
fe0dde |
@@ -80,4 +80,8 @@
|
|
|
fe0dde |
<title xml:lang="en-us">SSSD is configured to use LDAP</title>
|
|
|
fe0dde |
<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">sssd_conf_uses_ldap</check>
|
|
|
fe0dde |
</cpe-item>
|
|
|
fe0dde |
+ <cpe-item name="cpe:/a:net-snmp">
|
|
|
fe0dde |
+ <title xml:lang="en-us">Package net-snmp is installed</title>
|
|
|
fe0dde |
+ <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_net-snmp_package</check>
|
|
|
fe0dde |
+ </cpe-item>
|
|
|
fe0dde |
</cpe-list>
|
|
|
fe0dde |
diff --git a/ol8/cpe/ol8-cpe-dictionary.xml b/ol8/cpe/ol8-cpe-dictionary.xml
|
|
|
fe0dde |
index 473ba36235..3e90619c27 100644
|
|
|
fe0dde |
--- a/ol8/cpe/ol8-cpe-dictionary.xml
|
|
|
fe0dde |
+++ b/ol8/cpe/ol8-cpe-dictionary.xml
|
|
|
fe0dde |
@@ -75,4 +75,8 @@
|
|
|
fe0dde |
<title xml:lang="en-us">SSSD is configured to use LDAP</title>
|
|
|
fe0dde |
<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">sssd_conf_uses_ldap</check>
|
|
|
fe0dde |
</cpe-item>
|
|
|
fe0dde |
+ <cpe-item name="cpe:/a:net-snmp">
|
|
|
fe0dde |
+ <title xml:lang="en-us">Package net-snmp is installed</title>
|
|
|
fe0dde |
+ <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_net-snmp_package</check>
|
|
|
fe0dde |
+ </cpe-item>
|
|
|
fe0dde |
</cpe-list>
|
|
|
fe0dde |
diff --git a/rhel6/cpe/rhel6-cpe-dictionary.xml b/rhel6/cpe/rhel6-cpe-dictionary.xml
|
|
|
fe0dde |
index 1b696b88d3..d0557cc807 100644
|
|
|
fe0dde |
--- a/rhel6/cpe/rhel6-cpe-dictionary.xml
|
|
|
fe0dde |
+++ b/rhel6/cpe/rhel6-cpe-dictionary.xml
|
|
|
fe0dde |
@@ -96,4 +96,8 @@
|
|
|
fe0dde |
<title xml:lang="en-us">System uses zipl</title>
|
|
|
fe0dde |
<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_zipl_package</check>
|
|
|
fe0dde |
</cpe-item>
|
|
|
fe0dde |
+ <cpe-item name="cpe:/a:net-snmp">
|
|
|
fe0dde |
+ <title xml:lang="en-us">Package net-snmp is installed</title>
|
|
|
fe0dde |
+ <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_net-snmp_package</check>
|
|
|
fe0dde |
+ </cpe-item>
|
|
|
fe0dde |
</cpe-list>
|
|
|
fe0dde |
diff --git a/rhel7/cpe/rhel7-cpe-dictionary.xml b/rhel7/cpe/rhel7-cpe-dictionary.xml
|
|
|
fe0dde |
index e6b88f55cd..50f8006c97 100644
|
|
|
fe0dde |
--- a/rhel7/cpe/rhel7-cpe-dictionary.xml
|
|
|
fe0dde |
+++ b/rhel7/cpe/rhel7-cpe-dictionary.xml
|
|
|
fe0dde |
@@ -110,4 +110,8 @@
|
|
|
fe0dde |
<title xml:lang="en-us">SSSD is configured to use LDAP</title>
|
|
|
fe0dde |
<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">sssd_conf_uses_ldap</check>
|
|
|
fe0dde |
</cpe-item>
|
|
|
fe0dde |
+ <cpe-item name="cpe:/a:net-snmp">
|
|
|
fe0dde |
+ <title xml:lang="en-us">Package net-snmp is installed</title>
|
|
|
fe0dde |
+ <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_net-snmp_package</check>
|
|
|
fe0dde |
+ </cpe-item>
|
|
|
fe0dde |
</cpe-list>
|
|
|
fe0dde |
diff --git a/rhel8/cpe/rhel8-cpe-dictionary.xml b/rhel8/cpe/rhel8-cpe-dictionary.xml
|
|
|
fe0dde |
index 699251868d..3b9b4fc038 100644
|
|
|
fe0dde |
--- a/rhel8/cpe/rhel8-cpe-dictionary.xml
|
|
|
fe0dde |
+++ b/rhel8/cpe/rhel8-cpe-dictionary.xml
|
|
|
fe0dde |
@@ -80,4 +80,8 @@
|
|
|
fe0dde |
<title xml:lang="en-us">SSSD is configured to use LDAP</title>
|
|
|
fe0dde |
<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">sssd_conf_uses_ldap</check>
|
|
|
fe0dde |
</cpe-item>
|
|
|
fe0dde |
+ <cpe-item name="cpe:/a:net-snmp">
|
|
|
fe0dde |
+ <title xml:lang="en-us">Package net-snmp is installed</title>
|
|
|
fe0dde |
+ <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_net-snmp_package</check>
|
|
|
fe0dde |
+ </cpe-item>
|
|
|
fe0dde |
</cpe-list>
|
|
|
fe0dde |
diff --git a/shared/checks/oval/installed_env_has_net-snmp_package.xml b/shared/checks/oval/installed_env_has_net-snmp_package.xml
|
|
|
fe0dde |
new file mode 100644
|
|
|
fe0dde |
index 0000000000..66df54d473
|
|
|
fe0dde |
--- /dev/null
|
|
|
fe0dde |
+++ b/shared/checks/oval/installed_env_has_net-snmp_package.xml
|
|
|
fe0dde |
@@ -0,0 +1,38 @@
|
|
|
fe0dde |
+<def-group>
|
|
|
fe0dde |
+
|
|
|
fe0dde |
+ id="installed_env_has_net-snmp_package" version="1">
|
|
|
fe0dde |
+ <metadata>
|
|
|
fe0dde |
+ <title>Package net-snmp is installed</title>
|
|
|
fe0dde |
+ <affected family="unix">
|
|
|
fe0dde |
+ <platform>multi_platform_all</platform>
|
|
|
fe0dde |
+ </affected>
|
|
|
fe0dde |
+ <description>Checks if package net-snmp is installed.</description>
|
|
|
fe0dde |
+ <reference ref_id="cpe:/a:net-snmp" source="CPE" />
|
|
|
fe0dde |
+ </metadata>
|
|
|
fe0dde |
+ <criteria>
|
|
|
fe0dde |
+ <criterion comment="Package net-snmp is installed" test_ref="test_env_has_net-snmp_installed" />
|
|
|
fe0dde |
+ </criteria>
|
|
|
fe0dde |
+ </definition>
|
|
|
fe0dde |
+
|
|
|
fe0dde |
+{{% if pkg_system == "rpm" %}}
|
|
|
fe0dde |
+
|
|
|
fe0dde |
+ id="test_env_has_net-snmp_installed" version="1"
|
|
|
fe0dde |
+ comment="system has package net-snmp installed">
|
|
|
fe0dde |
+ <linux:object object_ref="obj_env_has_net-snmp_installed" />
|
|
|
fe0dde |
+ </linux:rpminfo_test>
|
|
|
fe0dde |
+ <linux:rpminfo_object id="obj_env_has_net-snmp_installed" version="1">
|
|
|
fe0dde |
+ <linux:name>net-snmp</linux:name>
|
|
|
fe0dde |
+ </linux:rpminfo_object>
|
|
|
fe0dde |
+{{% elif pkg_system == "dpkg" %}}
|
|
|
fe0dde |
+
|
|
|
fe0dde |
+ id="test_env_has_net-snmp_installed" version="1"
|
|
|
fe0dde |
+ comment="system has package net-snmp installed">
|
|
|
fe0dde |
+ <linux:object object_ref="obj_env_has_net-snmp_installed" />
|
|
|
fe0dde |
+ </linux:dpkginfo_test>
|
|
|
fe0dde |
+ <linux:dpkginfo_object id="obj_env_has_net-snmp_installed" version="1">
|
|
|
fe0dde |
+
|
|
|
fe0dde |
+ <linux:name>snmp</linux:name>
|
|
|
fe0dde |
+ </linux:dpkginfo_object>
|
|
|
fe0dde |
+{{% endif %}}
|
|
|
fe0dde |
+
|
|
|
fe0dde |
+</def-group>
|
|
|
fe0dde |
diff --git a/ssg/constants.py b/ssg/constants.py
|
|
|
fe0dde |
index a585f32afc..fa2c4ccd76 100644
|
|
|
fe0dde |
--- a/ssg/constants.py
|
|
|
fe0dde |
+++ b/ssg/constants.py
|
|
|
fe0dde |
@@ -500,6 +500,7 @@
|
|
|
fe0dde |
"systemd": "cpe:/a:systemd",
|
|
|
fe0dde |
"yum": "cpe:/a:yum",
|
|
|
fe0dde |
"zipl": "cpe:/a:zipl",
|
|
|
fe0dde |
+ "net-snmp": "cpe:/a:net-snmp",
|
|
|
fe0dde |
}
|
|
|
fe0dde |
|
|
|
fe0dde |
# Default platform to package mapping
|
|
|
fe0dde |
diff --git a/wrlinux1019/cpe/wrlinux1019-cpe-dictionary.xml b/wrlinux1019/cpe/wrlinux1019-cpe-dictionary.xml
|
|
|
fe0dde |
index f32e69e118..f31bad72e8 100644
|
|
|
fe0dde |
--- a/wrlinux1019/cpe/wrlinux1019-cpe-dictionary.xml
|
|
|
fe0dde |
+++ b/wrlinux1019/cpe/wrlinux1019-cpe-dictionary.xml
|
|
|
fe0dde |
@@ -79,4 +79,8 @@
|
|
|
fe0dde |
<title xml:lang="en-us">SSSD is configured to use LDAP</title>
|
|
|
fe0dde |
<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">sssd_conf_uses_ldap</check>
|
|
|
fe0dde |
</cpe-item>
|
|
|
fe0dde |
+ <cpe-item name="cpe:/a:net-snmp">
|
|
|
fe0dde |
+ <title xml:lang="en-us">Package net-snmp is installed</title>
|
|
|
fe0dde |
+ <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="filename">installed_env_has_net-snmp_package</check>
|
|
|
fe0dde |
+ </cpe-item>
|
|
|
fe0dde |
</cpe-list>
|
|
|
fe0dde |
|
|
|
fe0dde |
From b058d43efac626eea413f0d185bb5219027cc7d4 Mon Sep 17 00:00:00 2001
|
|
|
fe0dde |
From: Gabriel Becker <ggasparb@redhat.com>
|
|
|
fe0dde |
Date: Tue, 29 Sep 2020 09:53:25 +0200
|
|
|
fe0dde |
Subject: [PATCH 3/3] Fix test scenario for snmpd_not_default_password.
|
|
|
fe0dde |
|
|
|
fe0dde |
---
|
|
|
fe0dde |
.../snmpd_not_default_password/tests/missing.pass.sh | 1 +
|
|
|
fe0dde |
1 file changed, 1 insertion(+)
|
|
|
fe0dde |
|
|
|
fe0dde |
diff --git a/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/tests/missing.pass.sh b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/tests/missing.pass.sh
|
|
|
fe0dde |
index 3982740e83..d2a024f006 100644
|
|
|
fe0dde |
--- a/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/tests/missing.pass.sh
|
|
|
fe0dde |
+++ b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/tests/missing.pass.sh
|
|
|
fe0dde |
@@ -1,3 +1,4 @@
|
|
|
fe0dde |
#!/bin/bash
|
|
|
fe0dde |
|
|
|
fe0dde |
yum -y install net-snmp
|
|
|
fe0dde |
+rm -f /etc/snmp/snmpd.conf
|