|
 |
0950b5 |
From 4f9987487d11001ef666408dc88abaf783fa7395 Mon Sep 17 00:00:00 2001
|
|
|
0950b5 |
From: Marek Haicman <mhaicman@redhat.com>
|
|
|
0950b5 |
Date: Tue, 12 Dec 2017 00:04:39 +0100
|
|
|
0950b5 |
Subject: [PATCH] Fixed few remediation errors caused by missing include.
|
|
|
0950b5 |
|
|
|
0950b5 |
---
|
|
|
0950b5 |
...el7_fedora_perform_audit_adjtimex_settimeofday_stime_remediation.sh | 2 ++
|
|
|
0950b5 |
shared/fixes/bash/disable_ctrlaltdel_burstaction.sh | 3 +++
|
|
|
0950b5 |
2 files changed, 5 insertions(+)
|
|
|
0950b5 |
|
|
|
0950b5 |
diff --git a/shared/bash_remediation_functions/rhel7_fedora_perform_audit_adjtimex_settimeofday_stime_remediation.sh b/shared/bash_remediation_functions/rhel7_fedora_perform_audit_adjtimex_settimeofday_stime_remediation.sh
|
|
|
0950b5 |
index 26498471e..755d483ac 100644
|
|
|
0950b5 |
--- a/shared/bash_remediation_functions/rhel7_fedora_perform_audit_adjtimex_settimeofday_stime_remediation.sh
|
|
|
0950b5 |
+++ b/shared/bash_remediation_functions/rhel7_fedora_perform_audit_adjtimex_settimeofday_stime_remediation.sh
|
|
|
0950b5 |
@@ -1,3 +1,5 @@
|
|
|
0950b5 |
+source fix_audit_syscall_rule.sh
|
|
|
0950b5 |
+
|
|
|
0950b5 |
# Perform the remediation for the 'adjtimex', 'settimeofday', and 'stime' audit
|
|
|
0950b5 |
# system calls on Red Hat Enterprise Linux 7 or Fedora OSes
|
|
|
0950b5 |
function rhel7_fedora_perform_audit_adjtimex_settimeofday_stime_remediation {
|
|
|
0950b5 |
diff --git a/shared/fixes/bash/disable_ctrlaltdel_burstaction.sh b/shared/fixes/bash/disable_ctrlaltdel_burstaction.sh
|
|
|
0950b5 |
index ab01748c8..5266cf255 100644
|
|
|
0950b5 |
--- a/shared/fixes/bash/disable_ctrlaltdel_burstaction.sh
|
|
|
0950b5 |
+++ b/shared/fixes/bash/disable_ctrlaltdel_burstaction.sh
|
|
|
0950b5 |
@@ -1,3 +1,6 @@
|
|
|
0950b5 |
# platform = Red Hat Enterprise Linux 7, multi_platform_fedora
|
|
|
0950b5 |
|
|
|
0950b5 |
+# Include source function library.
|
|
|
0950b5 |
+. /usr/share/scap-security-guide/remediation_functions
|
|
|
0950b5 |
+
|
|
|
0950b5 |
replace_or_append '/etc/systemd/system.conf' '^CtrlAltDelBurstAction=' 'none' '@CCENUM@' '%s=%s'
|