Blob Blame History Raw
<?xml version="1.0" encoding="utf-8"?>
<Benchmark xmlns="http://checklists.nist.gov/xccdf/1.2" id="xccdf_moc.elpmaxe.www_benchmark_first">
      <status>incomplete</status>
      <version>1.0</version>
      <Profile id="xccdf_com.example_profile_my_profile">
        <title>My testing profile</title>
        <description>A profile for testing purposes.</description>
        <select selected="true" idref="xccdf_moc.elpmaxe.www_rule_first"/>
        <select selected="true" idref="xccdf_com.example_rule_tmp_part"/>
        <select selected="true" idref="xccdf_com.example_rule_passwd_min_len"/>
        <select selected="true" idref="xccdf_com.example_rule_telnet_not_installed"/>
        <select selected="true" idref="xccdf_com.example_rule_iptables_installed"/>
      </Profile>
      <Profile id="xccdf_com.example_profile_my_profile2">
        <title>My testing profile2</title>
        <description>Another profile for testing purposes.</description>
        <select selected="true" idref="xccdf_com.example_rule_telnet_not_installed"/>
        <select selected="true" idref="xccdf_com.example_rule_iptables_installed"/>
      </Profile>
      <Rule selected="false" id="xccdf_moc.elpmaxe.www_rule_first">
        <fix reboot="false" disruption="low" system="urn:xccdf:fix:script:sh">
          touch /root/must_exist.txt
        </fix>
        <check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
          <check-content-ref href="scap-mycheck-oval.xml" name="oval:org.open-scap.f14:def:20000"/>
        </check>
      </Rule>
      <Rule selected="false" id="xccdf_com.example_rule_tmp_part">
        <fix reboot="false" disruption="high" system="urn:redhat:anaconda:pre">
          part /tmp --mountoptions="nodev,noauto"
        </fix>
      </Rule>
      <Rule selected="false" id="xccdf_com.example_rule_passwd_min_len">
        <fix reboot="false" disruption="high" system="urn:redhat:anaconda:pre">
          passwd --minlen=10
        </fix>
      </Rule>
      <Rule selected="false" id="xccdf_com.example_rule_telnet_not_installed">
        <fix reboot="false" disruption="high" system="urn:redhat:anaconda:pre">
          package --remove=telnet
        </fix>
      </Rule>
      <Rule selected="false" id="xccdf_com.example_rule_iptables_installed">
        <fix reboot="false" disruption="high" system="urn:redhat:anaconda:pre">
          package --add=iptables
        </fix>
      </Rule>
    </Benchmark>