[RHEL] Make new 0.1.17 release
Fix check for Red Hat Enterprise Linux 6 installed

Updating RHEL6 check to match RHEL7 style, as submitted by Simon Lukasik on 17-MAR-2014.
Style update of CSCF profile

Moving all refine-values to the top of the profile for clarity.
[bugfix] Updated RHEL6 XCCDF ensure_gpgcheck_globally_activated to call correct OVAL

Catching up on mailing list traffic, noticed this issue reported by Michael DeLorenzo & Ronald
on 1-APR. Fixing OVAL mapping.
[bugfix / Fedora] updated ensure_gpgcheck_globally_activated

Similar to prior patch, but applied to Fedora codebase
[bugfix] Unlinking cracklib checks from RHEL7

As identified by Maura and Jan on 1-APR, RHEL7 doesn't use cracklib (but instead pam_pwquality). Removing the cracklib checks from RHEL7 now; longer term we'll review creating a consolidated check or net-new for RHEL7.
Merge branch 'master' of ssh://git.fedorahosted.org/git/scap-security-guide
Updated docs Makefile to embed TOC
Updated docs TOC

Per makefile updates in prior patch
Updated Developer Guide - Accounts

Updated "accounts" section of Developer guide, highlighting where to signup for core accounts needed when commiting to SSG
Updated Developer Guide - Patching

Authored first cut at instructions on how to use GitHub
Updated Developer guide - RPM build

Created first cut of RPM build instructions per Jan's notes
Updating master documentation TOC

Adding new chapters into publican build for Developer Documentation
[bugfix] XCCDF/OVAL naming mismatch, enable_execshield => sysctl_kernel_exec_shield

This also will align existing bash remediation scripts.

[shawnw@ssg-rhel6-devbox input]$ grep -rin "enable_execshield" *
auxiliary/stig_overlay.xml:243:	<overlay owner="disastig" ruleid="enable_execshield" ownerid="RHEL-06-000079" disa="366" severity="medium">
auxiliary/transition_notes.xml:1492:rule=enable_execshield manual=no
profiles/CS2.xml:74:<select idref="enable_execshield" selected="true"/>
profiles/CSCF-RHEL6-MLS.xml:269:<select idref="enable_execshield" selected="true" />
profiles/C2S.xml:177:<select idref="enable_execshield" selected="true"/>
profiles/usgcb-rhel6-server.xml:60:<select idref="enable_execshield" selected="true" />
profiles/rht-ccp.xml:94:<select idref="enable_execshield" selected="true"/>
profiles/common.xml:75:<select idref="enable_execshield" selected="true"/>
system/permissions/execution.xml:109:<Group id="enable_execshield_settings">
system/permissions/execution.xml:120:<Rule id="enable_execshield" severity="medium">
[shawnw@ssg-rhel6-devbox input]$ vim system/permissions/execution.xml
[shawnw@ssg-rhel6-devbox input]$ sed -i 's/enable_execshield/sysctl_kernel_exec_shield/g' auxiliary/stig_overlay.xml auxiliary/transition_notes.xml profiles/*
[shawnw@ssg-rhel6-devbox input]$ grep -rin "enable_execshield" *
system/permissions/execution.xml:109:<Group id="enable_execshield_settings">
ind:file => ind:filepath on disable_users_coredumps
[bugfix] regex update on accounts_max_concurrent_login_sessions

Parens vs brackets were causing the regex to match incorrectly the 2nd field. When configured with a "-", e.g.:

*	-	core	0

*	-	maxlogins	3

SCAP would throw a type validation error (it would expect an integer, but was matching on the - [a string]):
OpenSCAP Error: Conversion of the string "-" to an integer (64 bits) failed: Invalid argument [oval_cmp.c:113]
XCCDF/OVAL mismatch, smb_client_signing_smb_conf -> require_smb_signing

- Updated OVAL to match XCCDF name
- Updated ind:file --> ind:filepath

[shawnw@ssg-rhel6-devbox input]$ sed -i 's/smb_client_signing_smb_conf/require_smb_client_signing/g' checks/smb_client_signing_smb_conf.xml services/smb.xml
[shawnw@ssg-rhel6-devbox input]$ git mv checks/smb_client_signing_smb_conf.xml checks/require_smb_client_signing.xml
[shawnw@ssg-rhel6-devbox input]$ git add checks/require_smb_client_signing.xml
[shawnw@ssg-rhel6-devbox input]$ git add services/smb.xml
XCCDF/OVAL mismatch, mountopt_noexec_on_removable_partitions -> mount_option_noexec_removable_partitions

[shawnw@ssg-rhel6-devbox input]$ grep -rin mountopt_noexec_on_removable_partitions *
auxiliary/stig_overlay.xml:758:	<overlay owner="disastig" ruleid="mountopt_noexec_on_removable_partitions" ownerid="RHEL-06-000271" disa="87" severity="low">
profiles/nist-CL-IL-AL.xml:260:<select idref="mountopt_noexec_on_removable_partitions" selected="true" \>
profiles/CS2.xml:41:<select idref="mountopt_noexec_on_removable_partitions" selected="true"/>
profiles/CSCF-RHEL6-MLS.xml:139:<select idref="mountopt_noexec_on_removable_partitions" selected="true" />
profiles/C2S.xml:67:<select idref="mountopt_noexec_on_removable_partitions" selected="true" />
profiles/fisma-medium-rhel6-server.xml:185:<select idref="mountopt_noexec_on_removable_partitions" selected="true" />
profiles/usgcb-rhel6-server.xml:20:<select idref="mountopt_noexec_on_removable_partitions" selected="true" />
profiles/common.xml:210:<select idref="mountopt_noexec_on_removable_partitions" selected="true"/>
system/permissions/partitions.xml:54:<Rule id="mountopt_noexec_on_removable_partitions">

[shawnw@ssg-rhel6-devbox input]$ sed -i 's/mountopt_noexec_on_removable_partitions/mount_option_noexec_removable_partitions/g' auxiliary/stig_overlay.xml profiles/* system/permissions/partitions.xml

[shawnw@ssg-rhel6-devbox input]$ grep -rin mountopt_noexec_on_removable_partitions *

[shawnw@ssg-rhel6-devbox input]$ git commit auxiliary/stig_overlay.xml profiles/* system/permissions/partitions.xml
[bugfix OVAL] updated mount_option_noexec_removable_partitions to reflect proper XCCDF variable

XCCDF passing var_removable_partition, OVAL was looking for something different. Updated.
XCCDF/OVAL mismatch, install_openswan --> package_openswan_installed

[shawnw@ssg-rhel6-devbox checks]$ grep -rin install_openswan ../
../system/network/ipsec.xml:7:<Rule id="install_openswan">
../auxiliary/stig_overlay.xml:923:	<overlay owner="disastig" ruleid="install_openswan" ownerid="RHEL-06-000321" disa="1130" severity="low">
../profiles/CS2.xml:370:<select idref="install_openswan" selected="true" />
../profiles/stig-rhel6-server-upstream.xml:61:<select idref="install_openswan" selected="true" />
../profiles/desktop.xml:10:<select idref="install_openswan" selected="true"/>

[shawnw@ssg-rhel6-devbox checks]$ sed -i 's/install_openswan/package_openswan_installed/g' ../system/network/ipsec.xml ../auxiliary/stig_overlay.xml ../profiles/*

[shawnw@ssg-rhel6-devbox checks]$ grep -rin install_openswan ../