From blank at eclipse.ncsc.mil Thu Aug 20 11:34:31 2015 Content-Type: multipart/mixed; boundary="===============5672669143800076527==" MIME-Version: 1.0 From: Jeffrey Blank To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH 2/2] new versions of unauth suid/sgid OVAL checks Date: Mon, 15 Jul 2013 09:47:07 -0400 Message-ID: <51E3FD5B.9010005@eclipse.ncsc.mil> In-Reply-To: 51E3F541.6000905@redhat.com --===============5672669143800076527== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Ah, I think that was from the new patch. Ideally, we'd entirely remove the title and description from the OVAL metadata, and insert it from the XCCDF automatically when needed during the test/build process. Ditto with the "id" attribute for the Rule; this can always be derived from the filename in our build process. On 07/15/2013 09:12 AM, Shawn Wells wrote: > On 7/14/13 10:39 PM, Jeffrey Blank wrote: >> diff --git a/RHEL6/input/checks/file_permissions_unauthorized_sgid.xml b= /RHEL6/input/checks/file_permissions_unauthorized_sgid.xml >> index 5f10e5d..36d40d5 100644 >> --- a/RHEL6/input/checks/file_permissions_unauthorized_sgid.xml >> +++ b/RHEL6/input/checks/file_permissions_unauthorized_sgid.xml >> @@ -1,31 +1,73 @@ >> >> >> >> - Find Unauthorized SGID System Executables >> + Find setgid files system packages > = > Assuming you meant "Find setgid files _/from/_ system packages" > = > = > = > _______________________________________________ > scap-security-guide mailing list > scap-security-guide(a)lists.fedorahosted.org > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide >=20 --===============5672669143800076527==--