Looks good, please commit!
This also allows the check and fix to stand independently, which is a goal
for presentation/structure.
On Wed, Mar 13, 2013 at 8:46 AM, David Smith <dsmith(a)eclipse.ncsc.mil>wrote:
Signed-off-by: David Smith <dsmith(a)eclipse.ncsc.mil>
---
RHEL6/input/system/permissions/files.xml | 10 ++++++++--
1 files changed, 8 insertions(+), 2 deletions(-)
diff --git a/RHEL6/input/system/permissions/files.xml
b/RHEL6/input/system/permissions/files.xml
index 603a05d..9a0de83 100644
--- a/RHEL6/input/system/permissions/files.xml
+++ b/RHEL6/input/system/permissions/files.xml
@@ -230,8 +230,14 @@ following command:
<pre># chown root <i>FILE</i></pre>
</description>
<ocil clause="any of these files are not owned by root">
-To find shared libraries that are not owned by <tt>root</tt>,
-run the following command for each directory <i>DIR</i> which contains
shared libraries:
+Shared libraries are stored in the following directories:
+<pre>/lib
+/lib64
+/usr/lib
+/usr/lib64
+</pre>
+For each of these directories, run the following command to find files not
+owned by root:
<pre>$ find <i>DIR</i> \! -user root</pre>
</ocil>
<rationale>Files from shared library directories are loaded into the
address
--
1.7.1
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide