<def-group>
 <!-- THIS FILE IS GENERATED by create_services_enabled.py.  DO NOT EDIT.  -->
  <definition class="compliance" id="service_iptables_enabled"
  version="1">
    <metadata>
      <title>Service iptables Enabled</title>
      <affected family="unix">
        <platform>CentOS 4</platform>
		<platform>CentOS 5</platform>
		<platform>Red Hat Enterprise Linux 4</platform>
		<platform>Red Hat Enterprise Linux 5</platform>
      </affected>
      <description>The iptables service should be enabled if possible.</description>
    </metadata>
    <criteria comment="package iptables installed and service iptables is configured to start" operator="AND">
    <extend_definition comment="iptables installed" definition_ref="package_iptables_installed" />
    <criteria operator="OR" comment="service iptables is configured to start">
      <criterion comment="iptables runlevel 0" test_ref="test_runlevel0_iptables" />
      <criterion comment="iptables runlevel 1" test_ref="test_runlevel1_iptables" />
      <criterion comment="iptables runlevel 2" test_ref="test_runlevel2_iptables" />
      <criterion comment="iptables runlevel 3" test_ref="test_runlevel3_iptables" />
      <criterion comment="iptables runlevel 4" test_ref="test_runlevel4_iptables" />
      <criterion comment="iptables runlevel 5" test_ref="test_runlevel5_iptables" />
      <criterion comment="iptables runlevel 6" test_ref="test_runlevel6_iptables" />
    </criteria>
    </criteria>
  </definition>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel0_iptables"
  version="2">
    <unix:object object_ref="obj_runlevel0_iptables" />
    <unix:state state_ref="state_service_iptables_on" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel1_iptables"
  version="2">
    <unix:object object_ref="obj_runlevel1_iptables" />
    <unix:state state_ref="state_service_iptables_on" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel2_iptables"
  version="2">
    <unix:object object_ref="obj_runlevel2_iptables" />
    <unix:state state_ref="state_service_iptables_on" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel3_iptables"
  version="2">
    <unix:object object_ref="obj_runlevel3_iptables" />
    <unix:state state_ref="state_service_iptables_on" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel4_iptables"
  version="2">
    <unix:object object_ref="obj_runlevel4_iptables" />
    <unix:state state_ref="state_service_iptables_on" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel5_iptables"
  version="2">
    <unix:object object_ref="obj_runlevel5_iptables" />
    <unix:state state_ref="state_service_iptables_on" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel6_iptables"
  version="2">
    <unix:object object_ref="obj_runlevel6_iptables" />
    <unix:state state_ref="state_service_iptables_on" />
  </unix:runlevel_test>
  <unix:runlevel_object id="obj_runlevel0_iptables" version="1">
    <unix:service_name>iptables</unix:service_name>
    <unix:runlevel operation="equals">0</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel1_iptables" version="1">
    <unix:service_name>iptables</unix:service_name>
    <unix:runlevel operation="equals">1</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel2_iptables" version="1">
    <unix:service_name>iptables</unix:service_name>
    <unix:runlevel operation="equals">2</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel3_iptables" version="1">
    <unix:service_name>iptables</unix:service_name>
    <unix:runlevel operation="equals">3</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel4_iptables" version="1">
    <unix:service_name>iptables</unix:service_name>
    <unix:runlevel operation="equals">4</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel5_iptables" version="1">
    <unix:service_name>iptables</unix:service_name>
    <unix:runlevel operation="equals">5</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel6_iptables" version="1">
    <unix:service_name>iptables</unix:service_name>
    <unix:runlevel operation="equals">6</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_state comment="configured to start" id="state_service_iptables_on" version="1">
    <unix:start datatype="boolean">true</unix:start>
    <unix:kill datatype="boolean">false</unix:kill>
  </unix:runlevel_state>
</def-group>
