From jlieskov at redhat.com Thu Aug 20 11:37:16 2015 Content-Type: multipart/mixed; boundary="===============8854991375116578505==" MIME-Version: 1.0 From: Jan Lieskovsky To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH] [RHEL/6] Delete unused file_permissions_boot_grub_grub_conf.xml OVAL check [RHEL/6] Small changes in file_permissions_grub_conf.xml Date: Fri, 27 Jun 2014 05:25:28 -0400 Message-ID: <1983315051.45747287.1403861128288.JavaMail.zimbra@redhat.com> In-Reply-To: 53AC65A7.8000304@redhat.com --===============8854991375116578505== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable ----- Original Message ----- > From: "Shawn Wells" > To: scap-security-guide(a)lists.fedorahosted.org > Sent: Thursday, June 26, 2014 8:25:43 PM > Subject: Re: [PATCH] [RHEL/6] Delete unused file_permissions_boot_grub_gr= ub_conf.xml OVAL check [RHEL/6] Small > changes in file_permissions_grub_conf.xml > = > = > On 6/25/14, 1:02 PM, Jan Lieskovsky wrote: > = > = > = > 1) This patch deletes the unused file_permissions_boot_grub_grub_conf.xml > OVAL > check (since file_permissions_grub_conf.xml one is used instead of it). > = > 2) Also updates file_permissions_grub_conf.xml - replace path+filename wi= th > filepath element & add test_attestation. > = > Tested on RHEL-6, and seems to be working properly. > = > Please review. > = > Thank you && Regards, Jan. > -- > Jan iankko Lieskovsky / Red Hat Security Technologies Team > = > 0001-RHEL-6-Delete-unused-file_permissions_boot_grub_grub.patch > From f2c47c7c4f757f25d9e2a37266ecb4d078980dc7 Mon Sep 17 00:00:00 2001 > From: Jan Lieskovsky Date: Wed, 25 Jun 2014 18:53= :37 > +0200 > Subject: [PATCH] [RHEL/6] Delete unused > file_permissions_boot_grub_grub_conf.xml OVAL check > (file_permissions_grub_conf.xml is used instead) > = > [RHEL/6] file_permissions_grub_conf.xml: > * replace path+filename with filepath > * equip with test_attestation > = > Signed-off-by: Jan Lieskovsky --- > .../file_permissions_boot_grub_grub_conf.xml | 47 > ---------------------- > RHEL/6/input/checks/file_permissions_grub_conf.xml | 6 +-- > 2 files changed, 3 insertions(+), 50 deletions(-) > delete mode 100644 > RHEL/6/input/checks/file_permissions_boot_grub_grub_conf.xml > = > diff --git a/RHEL/6/input/checks/file_permissions_boot_grub_grub_conf.xml > b/RHEL/6/input/checks/file_permissions_boot_grub_grub_conf.xml > deleted file mode 100644 > index da0afec..0000000 > --- a/RHEL/6/input/checks/file_permissions_boot_grub_grub_conf.xml > +++ /dev/null > @@ -1,47 +0,0 @@ > - > - > - version=3D"1"> > - > - Verify /boot/grub/grub.conf Permissions > - > - Red Hat Enterprise Linux 6 > - > - This test makes sure that /boot/grub/grub.conf is own= ed > by 0, group owned by 0, and has mode 0600. If > - the target file or directory has an extended ACL then it will fail= the > mode check. > - ref_url=3D"test_attestation"/> > - > - > - > - > - > - comment=3D"/boot/grub/grub.conf mode and ownership" > id=3D"test_boot_grub_grub_conf" version=3D"1"> > - > - > - > - > - > - id=3D"object_boot_grub_grub_conf" version=3D"1"> > - /boot/grub > - grub.conf > - > - > - 0 > - > - > - 0 > - > - > - false > - false > - false > - true > - true > - false > - false > - false > - false > - false > - false > - false > - > - > diff --git a/RHEL/6/input/checks/file_permissions_grub_conf.xml > b/RHEL/6/input/checks/file_permissions_grub_conf.xml > index 3347a8b..3dc48db 100644 > --- a/RHEL/6/input/checks/file_permissions_grub_conf.xml > +++ b/RHEL/6/input/checks/file_permissions_grub_conf.xml > @@ -6,6 +6,7 @@ > Red Hat Enterprise Linux 6 > > File permissions for /boot/grub/grub.conf should be s= et > to 0600 (or stronger). > + ref_url=3D"test_attestation"/> > > > > @@ -17,9 +18,8 @@ > > > = > - id=3D"object_file_permissions_grub_conf" version=3D"1"> > - /boot/grub > - grub.conf > + id=3D"object_file_permissions_grub_conf" version=3D"2"> > + /boot/grub/grub.conf > > = > > -- > 1.8.3.1 > = > ack Thanks, pushed. Regards, Jan. -- Jan iankko Lieskovsky / Red Hat Security Technologies Team > = > = > -- > Shawn Wells > Director, Innovation Programs shawn(a)redhat.com | 443.534.0130 > @shawndwells > = > _______________________________________________ > scap-security-guide mailing list > scap-security-guide(a)lists.fedorahosted.org > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide >=20 --===============8854991375116578505==--