>From 620110f0d39ba03d361d0be77cdde934cf387953 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Sat, 28 Sep 2013 14:46:01 -0400 Subject: [PATCH 4/8] OVAL signoff: file_permissions_library_dirs Light OVAL cleanup & signoff TESTING: [shawn@SSG-RHEL6 checks]$ ./testcheck.py file_permissions_library_dirs.xml Evaluating with OVAL tempfile : /tmp/file_permissions_library_dirsFTuNR_.xml Writing results to : /tmp/file_permissions_library_dirsFTuNR_.xml-results Definition oval:scap-security-guide.testing:def:207: true Evaluation done. [shawn@SSG-RHEL6 checks]$ sudo chmod go+w /lib/modules/2.6.32-358.el6.x86_64/modules.alias.bin ; \ > ./testcheck.py file_permissions_library_dirs.xml ; \ > sudo chmod go+w /lib/modules/2.6.32-358.el6.x86_64/modules.alias.bin [sudo] password for shawn: Evaluating with OVAL tempfile : /tmp/file_permissions_library_dirsxXAggX.xml Writing results to : /tmp/file_permissions_library_dirsxXAggX.xml-results Definition oval:scap-security-guide.testing:def:207: false Evaluation done. [shawn@SSG-RHEL6 checks]$ sudo chmod go-w /lib/modules/2.6.32-358.el6.x86_64/modules.alias.bin ; \ > sudo chmod go+w /lib64/libcrypt-2.12.so ; \ > ./testcheck.py file_permissions_library_dirs.xml ; \ > sudo chmod go-w /lib64/libcrypt-2.12.so Evaluating with OVAL tempfile : /tmp/file_permissions_library_dirsXRlOwe.xml Writing results to : /tmp/file_permissions_library_dirsXRlOwe.xml-results Definition oval:scap-security-guide.testing:def:207: false Evaluation done. [shawn@SSG-RHEL6 checks]$ sudo chmod go+w /usr/lib/rpm/rpm.log ; \ > ./testcheck.py file_permissions_library_dirs.xml ; Evaluating with OVAL tempfile : /tmp/file_permissions_library_dirsuIDtZJ.xml Writing results to : /tmp/file_permissions_library_dirsuIDtZJ.xml-results Definition oval:scap-security-guide.testing:def:207: false Evaluation done. [shawn@SSG-RHEL6 checks]$ sudo chmod go-w /usr/lib/rpm/rpm.log ; \ > sudo chmod go+w /usr/lib64/gio/modules/libgiofam.so ; \ > ./testcheck.py file_permissions_library_dirs.xml ; Evaluating with OVAL tempfile : /tmp/file_permissions_library_dirs4d3K_q.xml Writing results to : /tmp/file_permissions_library_dirs4d3K_q.xml-results Definition oval:scap-security-guide.testing:def:207: false Evaluation done. [shawn@SSG-RHEL6 checks]$ sudo chmod go-w /usr/lib64/gio/modules/libgiofam.so ; \ > ./testcheck.py file_permissions_library_dirs.xml Evaluating with OVAL tempfile : /tmp/file_permissions_library_dirsRxChxs.xml Writing results to : /tmp/file_permissions_library_dirsRxChxs.xml-results Definition oval:scap-security-guide.testing:def:207: true Evaluation done. --- .../input/checks/file_permissions_library_dirs.xml | 45 ++++++------------- 1 files changed, 14 insertions(+), 31 deletions(-) diff --git a/RHEL6/input/checks/file_permissions_library_dirs.xml b/RHEL6/input/checks/file_permissions_library_dirs.xml index bcb6ce9..0005b8c 100644 --- a/RHEL6/input/checks/file_permissions_library_dirs.xml +++ b/RHEL6/input/checks/file_permissions_library_dirs.xml @@ -7,30 +7,30 @@ Checks that /lib, /lib64, /usr/lib, /usr/lib64, /lib/modules, and objects therein, are not group-writable or world-writable. + - - + - + - + /lib @@ -45,7 +45,9 @@ state_perms_nogroupwrite_noworldwrite state_symlink + + @@ -69,7 +71,9 @@ state_perms_nogroupwrite_noworldwrite state_symlink + + @@ -92,8 +96,10 @@ ^.*$ state_perms_nogroupwrite_noworldwrite state_symlink - + + + @@ -101,14 +107,14 @@ - + /usr/lib64 state_perms_nogroupwrite_noworldwrite state_symlink - + @@ -117,30 +123,7 @@ state_perms_nogroupwrite_noworldwrite state_symlink - - - - - - - - - - - - /lib/modules - - state_perms_nogroupwrite_noworldwrite - state_symlink - - - - - /lib/modules - ^.*$ - state_perms_nogroupwrite_noworldwrite - state_symlink - + symbolic link -- 1.7.1