[BESAdmin-Announcements] Content Modification Announcement - BigFix Security Configuration Management (SCM) DISA Benchmarks for Unix

Announcements for BES Administrators besadmin-announcements at bigmail.bigfix.com
Tue Jun 15 15:07:57 PDT 2010


BigFix has modified content in the following Security Configuration
Management (SCM) v3 benchmarks :
* SCM Checklist for DISA STIG on AIX 5.1
* SCM Checklist for DISA STIG on AIX 5.2
* SCM Checklist for DISA STIG on AIX 5.3
* SCM Checklist for DISA STIG on AIX 6.1
* SCM Checklist for DISA STIG on HPUX 11.00
* SCM Checklist for DISA STIG on HPUX 11.11
* SCM Checklist for DISA STIG on HPUX 11.23
* SCM Checklist for DISA STIG on RHEL 3
* SCM Checklist for DISA STIG on RHEL 4
* SCM Checklist for DISA STIG on RHEL 5
* SCM Checklist for DISA STIG on Solaris 8
* SCM Checklist for DISA STIG on Solaris 9
* SCM Checklist for DISA STIG on Solaris 10
 
This update addresses a number of issues, including:
* GEN001400a and GEN001400b: updated titles
* Two new fixlets to check group owner of /etc/passwd and /etc/shadow,
/etc/security/passwd (AIX)
* GEN000540: minor logic update (AIX); new ability to exclude users from
check 
* GEN000540a: check for /etc/login.defs (RHEL)
* New check for MINWEEKS in /etc/default/passwd (RHEL)
* GEN000600a: fixed a typographical error
* GEN000620: minor logic update; added EXCLUDE_USERS parameter (AIX); check
/etc/default/passwd (RHEL)
* GEN000680: minor logic update (AIX)
* Added max passwd age parameter (RHEL)
* GEN000800: updated remediation task (RHEL)
 
All customers that currently license the SCMv3 solution module, SCVM
solution pack, or SLM+SCVM solution bundle may gather this content update.
BES administrators are encouraged to verify open actions as necessary.  If
you are using custom sites based on BigFix content, you will need to
manually update the content in those sites with the content in the BigFix
out of the box sites.

Please contact BigFix Technical Support if you have any questions regarding
this change. Thank you.

--
BigFix Application Engineering Team



More information about the Besadmin-announcements mailing list