There are a few more coming that need more testing or aren't working correctly, but here's a small batch for now.
The behavior recurse="files" was deprecated, so I changed it to the normal "symlinks and directories". Also, the
environment variable tests were updated and replaced by the environmentvariable58 tests, objects, and states.
One check I can't submit an update to yet that has a similar problem is "accounts_root_path_dirs_no_write". I was
cleaning it up and replacing the deprecated check when I noticed that the check is not actually working correctly.
Specifying a single path in file_object gets the correct result of true or false, but passing in a variable with
multiple values (PATH, split into multiple strings) appears to always fail with "does not exist".
- Maura Dailey
Maura Dailey (3):
Replacing deprecated <ind:environmentvariable_...> tags with
<ind:environmentvariable58_...> tags
Removing deprecated recurse=files behavior.
Removing deprecated recurse="files" behavior
.../checks/accounts_dangerous_path_for_root.xml | 53 ++++++++++----------
.../input/checks/file_permissions_ungroupowned.xml | 4 +-
RHEL6/input/checks/file_permissions_unowned.xml | 4 +-
3 files changed, 31 insertions(+), 30 deletions(-)
_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide