Ah, I think that was from the new patch.
Ideally, we'd entirely remove the title and description from the OVAL
metadata, and insert it from the XCCDF automatically when needed during
the test/build process. Ditto with the "id" attribute for the Rule;
this can always be derived from the filename in our build process.
On 07/15/2013 09:12 AM, Shawn Wells wrote:
On 7/14/13 10:39 PM, Jeffrey Blank wrote:
> diff --git a/RHEL6/input/checks/file_permissions_unauthorized_sgid.xml
b/RHEL6/input/checks/file_permissions_unauthorized_sgid.xml
> index 5f10e5d..36d40d5 100644
> --- a/RHEL6/input/checks/file_permissions_unauthorized_sgid.xml
> +++ b/RHEL6/input/checks/file_permissions_unauthorized_sgid.xml
> @@ -1,31 +1,73 @@
> <def-group>
> <definition class="compliance"
id="file_permissions_unauthorized_sgid" version="1">
> <metadata>
> - <title>Find Unauthorized SGID System Executables</title>
> + <title>Find setgid files system packages</title>
Assuming you meant "Find setgid files _/from/_ system packages"
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide