From: Shawn Wells <shawn(a)redhat.com>
[user@redhat-thing-1 checks]$ ls -lL /etc/shadow
----------. 1 root user 1126 Sep 16 12:58 /etc/shadow
[user@redhat-thing-1 checks]$ ./testcheck.py file_groupowner_etc_shadow.xml
Evaluating with OVAL tempfile : /tmp/file_groupowner_etc_shadowrd4xQR.xml
Writing results to : /tmp/file_groupowner_etc_shadowrd4xQR.xml-results
Definition oval:scap-security-guide.testing:def:114: false
Evaluation done.
[user@redhat-thing-1 checks]$ sudo chgrp root /etc/shadow ; ls -lL /etc/shadow
----------. 1 root root 1126 Sep 16 12:58 /etc/shadow
[user@redhat-thing-1 checks]$ ./testcheck.py file_groupowner_etc_shadow.xml
Evaluating with OVAL tempfile : /tmp/file_groupowner_etc_shadowwrJXlu.xml
Writing results to : /tmp/file_groupowner_etc_shadowwrJXlu.xml-results
Definition oval:scap-security-guide.testing:def:114: true
Evaluation done.
[user@redhat-thing-1 checks]$ vim file_groupowner_etc_shadow.xml
[user@redhat-thing-1 checks]$ git commit file_groupowner_etc_shadow.xml
Aborting commit due to empty commit message.
---
RHEL6/input/checks/file_groupowner_etc_shadow.xml | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/RHEL6/input/checks/file_groupowner_etc_shadow.xml
b/RHEL6/input/checks/file_groupowner_etc_shadow.xml
index 953c869..579e1d8 100644
--- a/RHEL6/input/checks/file_groupowner_etc_shadow.xml
+++ b/RHEL6/input/checks/file_groupowner_etc_shadow.xml
@@ -7,6 +7,7 @@
</affected>
<description>The /etc/shadow file should be owned by the appropriate
group.</description>
+ <reference source="swells" ref_id="20130918"
ref_url="test_attestation" />
</metadata>
<criteria>
<criterion test_ref="test_groupowner_etc_shadow" />
@@ -23,7 +24,6 @@
</unix:file_state>
<unix:file_object comment="/etc/shadow"
id="object_file_groupowner_etc_shadow" version="1">
- <unix:path>/etc</unix:path>
- <unix:filename>shadow</unix:filename>
+ <unix:filepath>/etc/shadow</unix:filepath>
</unix:file_object>
</def-group>
--
1.7.1