>From 273fca22af9e24a42da94bbf92a64af4e3082a13 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Fri, 27 Sep 2013 15:59:58 -0400 Subject: [PATCH 1/8] OVAL signoff: accounts_dangerous_path_for_root TESTING: [root@SSG-RHEL6 checks]# find /lib -perm /022 -type f ; find /lib64/ -perm /022 -type f ; find /usr/lib -perm /022 -type f ; find /usr/lib64 -perm /022 -type f [root@SSG-RHEL6 checks]# ./testcheck.py file_permissions_library_dirs.xml Evaluating with OVAL tempfile : /tmp/file_permissions_library_dirstUlHnu.xml Writing results to : /tmp/file_permissions_library_dirstUlHnu.xml-results Definition oval:scap-security-guide.testing:def:207: true Evaluation done. [root@SSG-RHEL6 checks]# chmod go+w /lib64/libacl.so.1 [root@SSG-RHEL6 checks]# ./testcheck.py file_permissions_library_dirs.xml Evaluating with OVAL tempfile : /tmp/file_permissions_library_dirstTWqp5.xml Writing results to : /tmp/file_permissions_library_dirstTWqp5.xml-results Definition oval:scap-security-guide.testing:def:207: false Evaluation done. --- .../checks/accounts_dangerous_path_for_root.xml | 67 +++++++++++++------- 1 files changed, 44 insertions(+), 23 deletions(-) diff --git a/RHEL6/input/checks/accounts_dangerous_path_for_root.xml b/RHEL6/input/checks/accounts_dangerous_path_for_root.xml index efc4f0d..7e475c4 100644 --- a/RHEL6/input/checks/accounts_dangerous_path_for_root.xml +++ b/RHEL6/input/checks/accounts_dangerous_path_for_root.xml @@ -5,7 +5,9 @@ Red Hat Enterprise Linux 6 - The environment variable PATH should be set correctly for the root user. + The environment variable PATH should be set correctly for + the root user. + @@ -16,50 +18,69 @@ - - + + + PATH + + + - - + + - - + + - - + + - - + + - - + + - - - PATH - - + ^[:\.] - + :: - + \.\. - + [:\.]$ - + ^[^/] - + [^\\]:[^/] -- 1.7.1