Re: Mapping from DISA Stig references to Mitre CCE reference #s

2012-07-13 Thread Carolyn Rowland
Diego, It looks like http://iase.disa.mil/stigs/ has been updated recently (today). Right, we couldn't find any CCE lists that had mappings to the Linux STIG references. I guess we'll do some regex to figure out which controls map from the cfengine STIG samples to the CCE table we have to use.

File access granted only when cf-serverd is manually started

2012-07-13 Thread Ron Parker
I frequently get messages from the client like: Can't stat /var/cfengine/.../somefile in files.copyfrom promise when cf-serverd is started normally, by which I mean started at boot or by cf-agent from a promise. But, if I run it as root on the hub, "cf-serverd -v", then those messages go away

Re: Mapping from DISA Stig references to Mitre CCE reference #s

2012-07-13 Thread Diego Zamboni
Hi Carolyn, I don't know of such a mapping, and couldn't find one in a quick search. I suppose in principle it might be possible to generate it because CCE includes references, but AFAICT, all STIG references it includes are to the STIG for Windows 2003, I couldn't see any references to STIG fo

Mapping from DISA Stig references to Mitre CCE reference #s

2012-07-13 Thread Carolyn Rowland
Community, I don't suppose anyone has a mapping between the DISA STIG GEN numbers referenced in the Cfengine stigs.cf stig_README.txt and the Mitre CCE nubmers. My agency uses Mitre CCE reference numbers in it's configuration requirements, not the Stig GEN00xxx numbers so we are having trouble u

CFEngine Help: Re: Using defaults promises

2012-07-13 Thread no-reply
Forum: CFEngine Help Subject: Re: Using defaults promises Author: zzamboni Link to topic: https://cfengine.com/forum/read.php?3,26464,26465#msg-26465 Neil, The default value kicks in only when the variable in question is not defined. In your example, "version" *is* defined - although because the

CFEngine Help: Using defaults promises

2012-07-13 Thread no-reply
Forum: CFEngine Help Subject: Using defaults promises Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,26464,26464#msg-26464 Consider this bundle: body common control { bundlesequence => { "main", }; } bundle agent main { methods:

Re: Is it possible to abstract out the libvirt, pgsql and mysql components for packaging?

2012-07-13 Thread Mikhail Gusarov
On 07/12/2012 08:48 PM, Caitlyn O'Hanna wrote: > Backstory: I am trying to package cfengine into an RPM that will > allow people to install it and not have to install things like mysql, > pgsql and libvirt if they aren't using those particular > functionalities. This will require a lot of work,