cfengine/copbl — pull request #31 by jborozan (2013-09-30 14:14:45+00:00)
Title: STIGs.cf updated to be working with Redhat6

This version is updated to be working with Redhat6/CentOS6. I did NOT test everything - I find this working with my systems (common LAMP cases) and I take no responsibility.

Changes include:
- "redhat_5" is removed from handles
- There is common g_STIGs bundle (initially commented out) with strings for marking files created or modified by CFEngine as well as marking which lines are added - this is cosmetic but practical issue to prevent CFE overwrite when manually changing files in OS
- "pam_tally.so" is discontinued, "pam_tally2.so" is used
- there is additional and "extendend" version of line_edit bundle for creating sysctl.conf (initially commented out) in order to improve security - things which I collected and merged
- /etc/access.conf does not have a lot repeated entries any more
- /etc/securetty has added tty1, tty2 - I had a problem to login on VMware ESX with only console entry
- there is additional (initially commented out) version of line_edit bundle for maintaining /etc/securetty - CFE performs recreation instead of modification
- bodies names are prefixed with "STIGs_" to prevent "collision" with others definitions in bundles