Blame SOURCES/scap-security-guide-0.1.41-packages_abrt_sendmail_removed.patch

28bffe
diff --git a/linux_os/guide/services/base/package_abrt_removed.rule b/linux_os/guide/services/base/package_abrt_removed.rule
28bffe
new file mode 100644
28bffe
index 0000000000..6cdca812c8
28bffe
--- /dev/null
28bffe
+++ b/linux_os/guide/services/base/package_abrt_removed.rule
28bffe
@@ -0,0 +1,22 @@
28bffe
+documentation_complete: true
28bffe
+
28bffe
+prodtype: rhel6,rhel7,fedora
28bffe
+
28bffe
+title: 'Uninstall Automatic Bug Reporting Tool (abrt)'
28bffe
+
28bffe
+description: |-
28bffe
+    The Automatic Bug Reporting Tool (<tt>abrt</tt>) collects
28bffe
+    and reports crash data when an application crash is detected. Using a variety
28bffe
+    of plugins, abrt can email crash reports to system administrators, log crash
28bffe
+    reports to files, or forward crash reports to a centralized issue tracking
28bffe
+    system such as RHTSupport.
28bffe
+    {{{ describe_package_remove(package="abrt") }}}
28bffe
+
28bffe
+rationale: |-
28bffe
+    Mishandling crash data could expose sensitive information about
28bffe
+    vulnerabilities in software executing on the system, as well as sensitive
28bffe
+    information from within a process's address space or registers.
28bffe
+
28bffe
+severity: unknown
28bffe
+
28bffe
+{{{ complete_ocil_entry_package(package="abrt") }}}
28bffe
diff --git a/rhel7/profiles/ospp42.profile b/rhel7/profiles/ospp42.profile
28bffe
index 8550434ffa..376aebba51 100644
28bffe
--- a/rhel7/profiles/ospp42.profile
28bffe
+++ b/rhel7/profiles/ospp42.profile
28bffe
@@ -184,3 +184,4 @@ selections:
28bffe
     - audit_rules_etc_group_open
28bffe
     - audit_rules_etc_group_openat
28bffe
     - audit_rules_etc_group_open_by_handle_at
28bffe
+    - package_abrt_removed
28bffe
28bffe
diff --git a/rhel7/profiles/ospp42.profile b/rhel7/profiles/ospp42.profile
28bffe
index 376aebba51..d6068ea7f7 100644
28bffe
--- a/rhel7/profiles/ospp42.profile
28bffe
+++ b/rhel7/profiles/ospp42.profile
28bffe
@@ -185,3 +185,4 @@ selections:
28bffe
     - audit_rules_etc_group_openat
28bffe
     - audit_rules_etc_group_open_by_handle_at
28bffe
     - package_abrt_removed
28bffe
+    - package_sendmail_removed