Agreed; ack.


On Fri, May 23, 2014 at 9:35 PM, Shawn Wells <shawn@redhat.com> wrote:
Per discussions on the list, there's really no need to use 'symlinks and directories' here.

Signed-off-by: Shawn Wells <shawn@redhat.com>
---
 RHEL/6/input/checks/no_files_unowned_by_user.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL/6/input/checks/no_files_unowned_by_user.xml b/RHEL/6/input/checks/no_files_unowned_by_user.xml
index f3f1276..27081f1 100644
--- a/RHEL/6/input/checks/no_files_unowned_by_user.xml
+++ b/RHEL/6/input/checks/no_files_unowned_by_user.xml
@@ -28,7 +28,7 @@
   </ind:textfilecontent54_object>

   <unix:file_object comment="all local files" id="file_permissions_unowned_object" version="1">
-    <unix:behaviors recurse="symlinks and directories" recurse_direction="down" recurse_file_system="local" />
+    <unix:behaviors recurse="directories" recurse_direction="down" recurse_file_system="local" />
     <unix:path>/</unix:path>
     <unix:filename operation="pattern match">.*</unix:filename>
     <filter action="exclude">file_permissions_unowned_userid_list_match</filter>
--
1.7.1

_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide



--
David Smith
Sr. Information Security Engineer
Secure Innovations, LLC