>From 7725df59cd6a1766277c944e91800560a9273c9b Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Fri, 27 Dec 2013 01:11:09 -0500 Subject: [PATCH 19/31] Renamed userowner_passwd_file to file_owner_etc_passwd, moved to shared/ - Renamed XCCDF rule name to match filecheck template - Tested on RHEL7, updated CPE, moved to shared, created symlinks --- RHEL/6/input/auxiliary/stig_overlay.xml | 2 +- RHEL/6/input/checks/file_owner_etc_passwd.xml | 30 +--------------------- RHEL/6/input/profiles/CS2.xml | 2 +- RHEL/6/input/profiles/common.xml | 2 +- .../6/input/profiles/fisma-medium-rhel6-server.xml | 2 +- RHEL/6/input/profiles/nist-CL-IL-AL.xml | 2 +- RHEL/6/input/profiles/rht-ccp.xml | 2 +- RHEL/6/input/profiles/usgcb-rhel6-server.xml | 2 +- RHEL/6/input/system/permissions/files.xml | 2 +- RHEL/7/input/auxiliary/stig_overlay.xml | 2 +- RHEL/7/input/checks/file_owner_etc_passwd.xml | 1 + RHEL/7/input/profiles/rht-ccp.xml | 2 +- RHEL/7/input/system/permissions/files.xml | 2 +- shared/oval/file_owner_etc_passwd.xml | 29 +++++++++++++++++++++ 14 files changed, 42 insertions(+), 40 deletions(-) mode change 100644 => 120000 RHEL/6/input/checks/file_owner_etc_passwd.xml create mode 120000 RHEL/7/input/checks/file_owner_etc_passwd.xml create mode 100644 shared/oval/file_owner_etc_passwd.xml diff --git a/RHEL/6/input/auxiliary/stig_overlay.xml b/RHEL/6/input/auxiliary/stig_overlay.xml index e1d21c2..428681e 100644 --- a/RHEL/6/input/auxiliary/stig_overlay.xml +++ b/RHEL/6/input/auxiliary/stig_overlay.xml @@ -112,7 +112,7 @@ The /etc/gshadow file must have mode 0000. - + The /etc/passwd file must be owned by root. diff --git a/RHEL/6/input/checks/file_owner_etc_passwd.xml b/RHEL/6/input/checks/file_owner_etc_passwd.xml deleted file mode 100644 index 44d3e18..0000000 --- a/RHEL/6/input/checks/file_owner_etc_passwd.xml +++ /dev/null @@ -1,29 +0,0 @@ - - - - Verify user who owns 'passwd' file - - Red Hat Enterprise Linux 6 - - The /etc/passwd file should be owned by the appropriate - user. - - - - - - - - - - - - 0 - - - /etc - passwd - - diff --git a/RHEL/6/input/checks/file_owner_etc_passwd.xml b/RHEL/6/input/checks/file_owner_etc_passwd.xml new file mode 120000 index 0000000..3c6a1fd --- /dev/null +++ b/RHEL/6/input/checks/file_owner_etc_passwd.xml @@ -0,0 +1 @@ +../../../../shared/oval/file_owner_etc_passwd.xml \ No newline at end of file diff --git a/RHEL/6/input/profiles/CS2.xml b/RHEL/6/input/profiles/CS2.xml index d8d3f43..86ba34e 100644 --- a/RHEL/6/input/profiles/CS2.xml +++ b/RHEL/6/input/profiles/CS2.xml @@ -154,7 +154,7 @@ + diff --git a/RHEL/6/input/profiles/common.xml b/RHEL/6/input/profiles/common.xml index eea2ac7..2b7f984 100644 --- a/RHEL/6/input/profiles/common.xml +++ b/RHEL/6/input/profiles/common.xml @@ -32,7 +32,7 @@ - diff --git a/RHEL/6/input/profiles/fisma-medium-rhel6-server.xml b/RHEL/6/input/profiles/fisma-medium-rhel6-server.xml index 105d7ce..da7355f 100644 --- a/RHEL/6/input/profiles/fisma-medium-rhel6-server.xml +++ b/RHEL/6/input/profiles/fisma-medium-rhel6-server.xml @@ -48,7 +48,7 @@ + diff --git a/RHEL/6/input/profiles/nist-CL-IL-AL.xml b/RHEL/6/input/profiles/nist-CL-IL-AL.xml index 7bf1293..5548ffe 100644 --- a/RHEL/6/input/profiles/nist-CL-IL-AL.xml +++ b/RHEL/6/input/profiles/nist-CL-IL-AL.xml @@ -142,7 +142,7 @@ assurance." + diff --git a/RHEL/6/input/profiles/rht-ccp.xml b/RHEL/6/input/profiles/rht-ccp.xml index 8af94c5..aefea86 100644 --- a/RHEL/6/input/profiles/rht-ccp.xml +++ b/RHEL/6/input/profiles/rht-ccp.xml @@ -73,7 +73,7 @@ + diff --git a/RHEL/6/input/profiles/usgcb-rhel6-server.xml b/RHEL/6/input/profiles/usgcb-rhel6-server.xml index 1f85107..2983256 100644 --- a/RHEL/6/input/profiles/usgcb-rhel6-server.xml +++ b/RHEL/6/input/profiles/usgcb-rhel6-server.xml @@ -43,7 +43,7 @@ + diff --git a/RHEL/6/input/system/permissions/files.xml b/RHEL/6/input/system/permissions/files.xml index 6f6f5c0..71461d7 100644 --- a/RHEL/6/input/system/permissions/files.xml +++ b/RHEL/6/input/system/permissions/files.xml @@ -131,7 +131,7 @@ is critical for system security. - + Verify User Who Owns <tt>passwd</tt> File diff --git a/RHEL/7/input/auxiliary/stig_overlay.xml b/RHEL/7/input/auxiliary/stig_overlay.xml index 3152f32..d21fe1e 100644 --- a/RHEL/7/input/auxiliary/stig_overlay.xml +++ b/RHEL/7/input/auxiliary/stig_overlay.xml @@ -112,7 +112,7 @@ The /etc/gshadow file must have mode 0000. - + The /etc/passwd file must be owned by root. diff --git a/RHEL/7/input/checks/file_owner_etc_passwd.xml b/RHEL/7/input/checks/file_owner_etc_passwd.xml new file mode 120000 index 0000000..3c6a1fd --- /dev/null +++ b/RHEL/7/input/checks/file_owner_etc_passwd.xml @@ -0,0 +1 @@ +../../../../shared/oval/file_owner_etc_passwd.xml \ No newline at end of file diff --git a/RHEL/7/input/profiles/rht-ccp.xml b/RHEL/7/input/profiles/rht-ccp.xml index a8d25a3..e4d9836 100644 --- a/RHEL/7/input/profiles/rht-ccp.xml +++ b/RHEL/7/input/profiles/rht-ccp.xml @@ -72,7 +72,7 @@ FILE PERMISSION CHECKS + diff --git a/RHEL/7/input/system/permissions/files.xml b/RHEL/7/input/system/permissions/files.xml index a580674..b6c6943 100644 --- a/RHEL/7/input/system/permissions/files.xml +++ b/RHEL/7/input/system/permissions/files.xml @@ -131,7 +131,7 @@ is critical for system security. - + Verify User Who Owns <tt>passwd</tt> File diff --git a/shared/oval/file_owner_etc_passwd.xml b/shared/oval/file_owner_etc_passwd.xml new file mode 100644 index 0000000..13dd0bf --- /dev/null +++ b/shared/oval/file_owner_etc_passwd.xml @@ -0,0 +1,29 @@ + + + + Verify user who owns 'passwd' file + + Red Hat Enterprise Linux 6 + Red Hat Enterprise Linux 7 + + The /etc/passwd file should be owned by the appropriate + user. + + + + + + + + + + + + 0 + + + /etc/passwd + + -- 1.8.3.1